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I. Basis of the report 

1 . This report has been drawn on the basis of {substitute sheets which have been furnished to the receiving Office in 
response to an invitation under Article 14 are referred to in this report as "originally filed" and are not annexed to 
the report since they do not contain amendments.): 



Description, pages: 

1-8.10-51 
9 



as originally filed 
as received on 



28/08/1 999 with letter of 



26/08/1999 



Claims, No. 

1-22 



as received on 



28/08/1999 with letter of 



26/08/1999 



Drawings, sheets: 

1/9-9/9 as originally filed 

2. The amendments have resulted in the cancellation of: 



□ the description, pages: 
K the claims, Nos.: 

□ the drawings, sheets: 



23-42 



3. □ This report has been established as if (some of) the amendments had not been made, since they have been 
considered to go beyond the disclosure as filed (Rule 70.2(c)): 



4. Additional observations, if necessary: 



IV. Lack of unity of invention 

1 . In response to the invitation to restrict or pay additional fees the applicant has: 

□ restricted the claims. 

□ paid additional fees. 

□ paid additional fees under protest. 
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□ neither restricted nor paid additional fees. 

2. H This Authority found that the requirement of unity of invention is not complied and chose, according to Rule 

68.1 , not to invite the applicant to restrict or pay additional fees. 

3. This Authority considers that the requirement of unity of invention in accordance with Rules 13.1 , 13.2 and 13.3 is 

□ complied with. 

H not complied with for the following reasons: 
see separate sheet 

4. Consequently, the following parts of the international application were the subject of international preliminary 
examination in establishing this report: 

^ alt parts. 

□ the parts relating to claims Nos. . 

V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or Industrial 
applicability; citations and explanations supporting such statement 

1. Statement 



Novelty (N) 


Yes: 


Claims 


1-22 




No: 


Claims 




Inventive step (IS) 


Yes: 


Claims 


1-17 




No: 


Claims 


18-22 


Industrial applicability (lA) 


Yes: 


Claims 


1-22 




No: 


Claims 





2. Citations and explanations 
see separate sheet 

VII. Certain defects in the international application 

The following defects in the form or contents of the international application have been noted: 
see separate sheet 
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VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 
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Concerning Box IV 

The following document is cited :- 

D1 Delaigle et al.: "Digital Watermarking", Proceedings of the SPIE, Vol. 

2659, February 1996, pages 99-1 10 

Comparison of the first alleged invention (claims 1 to 17) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- encoding a watermark using at least one key of an asymmetric cryptographic key pair, 

- encrypting the stego data set using the key pair, and 

- transmitting the encrypted stego data set. 

Comparison of the second alleged invention (claim 18) with the disclosure of document 
D1 shows that the following technical features could be considered as contributing to 
the prior art as represented by document D1: 

- generating at least one message 

- digitally signing said message using an asymmetric cryptographic key pair, and 

- using the signature as a seed for watermark generation. 

Comparison of the third alleged invention (claims 19 and 20) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- calculating at least some magnitude Fourier components of a cover data set, 

- applying an authentification function to said components to generate an 
authentification message, 

- encrypting the authentification message using a secret key of an asymmetric 
cryptographic key pair, and 

- embedding said encrypted message as a payload in a public watermark. 

Comparison of the fourth alleged invention (claims 21 and 22) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 
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- transmitting a hash value of the stego data set to a registration party, and 

- storing certification data at the registration party, the certification data comprising a 
hash value of the stego data set, a digital time stamp and information designating the 
originator of the stego data set. 

Thus, the differences between the claims of the different groups of inventions and the 
disclosure of document D1 are totally different between invention groups. Therefore, 
the independent claims on file are not linked together by a single general inventive 
concept, as required by Rule 13.1 PCT. 

The IPEA chose not to invite the Applicant to pay additional examination fees pursuant 
to Rule 68.1 PCT since, as pointed out above, the lack of unity seemed to arise (for the 
most part) from the choice of claim wording adopted and the desire to protect subpart 
of the invention, and could have been remedied by appropriate wording amendments. 

Concerning Box V 

The following further documents were cited in the Written Opinion : 
D2 : EP-A-0 534 419 

D3 Zhao et al: "Embedding Robust Labels into Images for Copyright 

Protection". Proceedings of the Knowright Conference. Proceedings of 
The International Congress on Intellectual Property Rights for 
Specialized Information. Knowledge and New Technology. 21^* August 
1995. pages 242-251, XP000603945 

D4 Ruanaidh et al: "Phase Watermarking of Digital Images". Proceedings 

of The International Conference on Image Processing (IC, Lausanne, 
Sept. 16*^ - 19^ 1996, Vol. 3. 16*^ September 1996, pages 239-242, 
XP0001 99952, Institute of Electrical and Electronics Engineers 

D5 : FR-A-2 740 897 

D6 : EP-A-0 539 726 
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The following documents are cited for the first time in this Report, following the drafting 
of certain claims as being indisputably independent : 

D7 Delaigle J.-F. et al: 'Digital Images Protection Techniques in a 

Broadcast Framework: An Overview', PROCEEDINGS OF THE 
EUROPEAN CONFERENCE ON MULTIMEDIA APPLICATIONS. 
SERVICES AND TECHNIQUES, Vol. 2, 28 - 30 May 1996, pages 71 1- 
727, XP0001 99920, Louvain la Neuve (BE) 

D8 Zhao et al: 'A WWW Service to embed and prove digital copyright 

watermarks' PROCEEDINGS OF THE EUROPEAN CONFERENCE 
ON MULTIMEDIA APPLICATIONS. SERVICES AND TECHNIQUES, 
vol. 2, 28 - 30 May 1996, pages 695-709, XP000199921, Louvain la 
Neuve (BE) 

As pointed out with respect to clarity and Box VIII below, various claims lack clarity. 
Nonetheless, should these clarity objections be met during further prosecution of this 
application in the national / regional phase, then the comments below regarding 
inventive step would be applicable. 

Claims 1 to 17 

The subject-matter of these claims requires that, rather than a single private key. an 
asymmetric pair of cryptographic keys is used in both generating a watermark and in 
encrypting the watermarked data. Whilst, as set out in the prior art summary below, 
both asymmetric key pairs and watermarks using such pairs are known, there is no 
prior art document which suggests that the same pair be used for watermarking and 
encrypting the watermarked data set. This would appear to be a step back from what 
would be the result of a combination of document D7, disclosing the use of asymmetric 
cryptographic key pairs, with, for example, a document D2 relating to cryptography in 
general, namely that, for full security, different keys should be used for watermarking 
and final encryption of the result of watermarking. 

Claim 18 

The subject-matter of this claim is rendered obvious by the disclosure of document D3. 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
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Document D3 teaches the skilled person that a message, relating to features extracted 
from an image to be watermarked, can be digitally signed using a private key and then 
used as a seed for watermark generation (in particular, for seeding the positions at 
which said watermark is inserted) - see the top of page 244. The only difference with 
respect to the subject-matter of independent claim 18 is the use of an asymmetric 
cryptographic key pair. Despite the arguments of the Applicant relating to the 
complexity of such key pairs, the IPEA does not consider that this fact alone would put 
the skilled person off at least considering using them in place of a private key. 
Moreover, claim 18 does not specify how the method is adapted to the use of an 
asymmetric cryptographic key pair. Thus, the subject-matter of claim 18 is derivable in 
an obvious manner from the disclosure of document D3. 

Claims 19 and 20 

The subject-matter of these claims is rendered obvious by the disclosure of document 
D4 taken in combination with the disclosure of any of the documents D1, D3 and D7, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D4 teaches the skilled person how to generate a watermark using a Discrete 
Fourier Transform, by altering, inter alia, the phase components resulting from the 
application of said transform. It would be obvious to adapt the teaching of document D4 
such that the process of independent claim 30, requiring modification of the magnitude 
components, is carried out, particularly since this possibility is also hinted at in the 
disclosure of document D4. 

Moreover, each of the documents D1 , D3 and D7 discloses the use of keys in 
watermarking. Their use to control the insertion of the watermarks disclosed in 
document D4 is thus an obvious measure to take. The remarks made above with 
respect to the use of asymmetric cryptographic key pairs are applicable to claim 19 
also. 

Claims 21 and 22 

The subject-matter of these claims is rendered obvious by the disclosure of document 
D8, and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D8 teaches the skilled person how to generate a stego data set and transmit 
it between two parties, whilst registering certification data at a third party (see the 
paragraph labelled (3) at the top of page 705). The only difference between this 
disclosure and the subject-matter of independent claim 39 is the use of a hash function 
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instead of a cryptographic key in the latter. However, such hash functions and their 
advantages are well known in the art, and their use in the context of the system 
disclosed in document D8 thus cannot be considered as being of any inventive 
significance. 

Concerning Box VII 

The claims are not in the two-part form defined in Rule 6.3 (b) PCT. 

The inclusion by reference of the priority document may be objectionable under certain 
national or regional jurisdictions (e.g. Europe). 

The abbreviation "IAD" appearing on page 13, line 33 has not been previously defined. 
Concerning Box VIII 

Claims 1, 4, 6. 7, 12, 18 and 19 lack clarity and/or support in the description, and 
therefore do not meet the requirement set out in Article 6 PCT. 

Claim 1 

This claim is far too vaguely and speculatively worded. It is, for example, not clear from 
the present claim, how the various levels of security referred to in the description are 
realised, since only one watermark and only one key need be used, according to 
certain claimed alternatives. In the case of the other alternatives, i.e. more than one 
watermark and a second (public) key, it is completely obscure what is done with these 
items. For example, if only one key of a pair is used ("at least one" means one, or more 
than one), is it the private or the public key. In the former case, their is very little 
difference with respect to certain prior approaches. In the case of two keys, are 
different watermarks protected differently ? 

From the description it would appear that a detection watermark is embedded, followed 
by a first layer of cryptographic protection, followed by embedding of a private 
watermark, followed by more cryptographic protection, followed by embedding of a 
public watermark and finally a third layer of cryptographic protection (see, in particular, 
pages 23 and 24). 
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It is furthermore not clear, whether "encoding" in the claim is the same as "encrypting" 
in the description, as "encoding" is never actually defined in the description. 

Claim 4 

There is no support in the description for the features of this claim, in particular pages 
30 to 33 (section lllb) do not mention modulation of the phase components. 

Claim 6 

The wording "encoded" is objected to for reasons set out above with respect to claim 1 . 
It is not clear, where in the description there is support for use of more than one 
watermark of the first type. 

Claim 7 

Claim 6 implies that the first watermark is the private watermark (which, according to 
pages 23 and 24 is the type of watermark which is encrypted using the private key 
(PSh), whereas the public watermark is encrypted using the public key (vsh)). Claim 7 
then implies that the first (private) watermark is encrypted using a hash value, which 
contradicts said description pages. 

Claim 12 

It is not at all clear from the claim, what "erased elements" might be. Why, and by 
whom or what have they been erased ? The claim per se must define what this wording 
means. 

Claim 18 

It is not at all clear what is meant by the wording "generating at least one message", 
because neither the starting data nor the resulting data is defined. 
By analogy with the objections to claim 1 , it is not clear, what the public key of the pair 
is used to encrypt, and what the private key is used to encrypt. 

Claim 19 

It is not clear what is meant by "calculating at least some magnitude Fourier 
components". 
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It is not clear what an "authentification value" is. In line with the description, the wording 
"an authentification message " should have been used on this claim. 

It is not clear from the "embedding" strep, that this step uses the public key. 
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propose a digital signature scheme for watermarking fac- 
simile dociiments (binary images) . This scheme modify the 
length of certain runs of data with a single bit of the 
signature data. 



provide a system of the type mentioned above that pro- 
vides a simple and secure way of generating and transmit- 
ting watermarked data. This object is achieved by the 
methods described in the claims. 



is achieved by an integrated solution method for generat- 
ing and transmitting a data set between two parties H and 
B comprising the steps of a) providing a cover data set 
corresponding to the data set to be transmitted, b) gen- 
erating a stego data set of said cover data set by 
embedding at least one digital watermark in said cover 
data set, wherein said watermark is encoded using at 
least one key of an asymmetric cryptographic key pair of 
H, said key pair comprising a secret private key and a 
known public key derived therefrom, and c) encrypting 
said stego data set using said key pair of H, d) trans- 
mitting said encrypted stego data set from said party H 
to said party B. 

Preferably, the private and public keys of 
party H are an elliptic curve key pair. 

The party creating the watermark can embed a 
detection, a private and a public watermark in the data 
set, wherein the detection or the private watermark is 
derived from the private key, the public watermark from 
the public key. The 'public watermark can be detected by 
third parties while the private watermark can only be de- 
tected using private information. Preferably, the detec- 
tion or private watermark is not derived from' the private 
key directly but from a hash value of the same and/or 
from a signature generated with the same,, such that the 
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Dear Sirs 

Enclosed please find amended pages 9, 52 - 56 and one page 57 - 63 for replacing the current 
pages 9, 52 - 63. 

The following amendments have been made: 

- Claims 19-38 have been cancelled. 

- Original claims 41 and 42 now carry the numbers 19 and 20. 

- Original claims 39 and 40 now carry the numbers 21 and 22. 

- In claim 4, "phase components" has been replaced by "magnitude components". This is 
disclosed on page 34, step S^f the description: It is the magnitude components of the 
Fourier transform that are,, being modified with the pseudo-random vector m (see also 
page 31, line 33). 

- Claim 6 has been amended for better clarity by cancelling the word "further" (that was 
objected to by the examiner) and by replacing "at least a first watermark" by "at least one 
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watermark of a first type". The "watermark of a first type" can either be the "private 
watermark" or the "detection watermark" described on page 23, fines 26ff and 3 Iff. For 
encoding both these watermarks, the private key ps^ has been used: for the detection 
watermark, the value crh(psH) is used as a first argument in the function OWEA; for the 
private watermark, psn enters as a first argument in function DSSMRq, the result of 
which is again used as a first argument in function OWEA. 

- Claims 7 and 8 have been amended according to the changes in claim 6. 

- Similar to claim 6, the expression "second watermark" of claim 9 has been amended to 
"watermark of a second type". Also, claim 9 has been corrected to state that the Fourier 
transform is calculated on the cover data, not the stego data, as correctly pointed out by 
the examiner. 

- In claim 10, step ii, "at least one key" has been replaced by "a key". 

- In claim 18, "especially for step b) of one of the preceding claims," has been deleted. 

- In claims 19, 21 (original claims 41, 39), "especially of one of the preceding claims," has 
been deleted. 

- On page 9, lines 27, 28, it has been added that the private and public keys of party H are 
an elliptic curve key pair. This was disclosed in original claim 5. 

Claim 1 

a) Inventive step of claim 1 : 

The problem to be solved by the present invention is to provide a simple and secure way for 
generating a stego data set and transmitting the same. This method is solved by claim. The 
stego data set is generated by embedding at least one watermark into it. The watermark is 
encoded using a key of an asymmetric cryptographic key pair. The stego data set is then 
encrypted using the same key pair. 

In contrast to known techniques, such as those described in Dl and D2, the same keys are 
used for protecting the watermark as well as the transmission. This simplifies the key 
management on the copyright owner's side (only one pair of keys must be maintained) as well 
as the verification of the received message and watermark (because not only message 
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recovery/verification, but also watermark detection/verification can profit from the same key 
infrastructure). 

It is not disputed that Dl teaches the skilled person to generate a watermark using, inter alia, a 
copyright owner's secret key. Dl does, however, not specify what kind of key this is. It 
simply says that the key must be secret. A normal computer user often uses a large number of 
such secret keys, mostly in the form of passwords. The user manages them himself and 
privately. 

Asymmetric cryptographic key pairs, as described in D2, are well known for encrypting 
messages. They consist of a private and a public key. The public key is usually registered at a 
trusted party. Also, asynmietric cryptographic key pairs are usually fairly long in order to 
provide good security, hence the private key is usually not a simple password but a passphrase 
or a long series of digits. 

Because of their length, because of the fact that they come in pairs, because of the need for 
their registration and because of their narrow scope of application, asymmetric cryptographic 
key pairs are therefore usually not regarded as "just another secret key" that can be used for 
any suitable purpose. Hence, a person skilled in the art would not think it obvious to "abuse" 
them wherever a secret key is required. In particular, just because Dl suggests to use a secret 
key for encoding a watermark, it would not be obvious to use a key of an asymmetric 
cryptographic key pair for this purpose. 

Only after overcoming the prejudice against "abusing" the asymmetric key pair, a person 
skilled in the art would consider the consequences of using them for watermark generation. It 
would therefore be retrospective to assert that the above mentioned advantages would 
encourage the person skilled in the art to use the key pair as claimed. 

As to the arguments at the top of sheet four of the communication of 01. 07. 99, it is stated 
that "D2 teaches the skilled person how to increase cryptographic security by using an 
asymmetric key pair" and that it would therefore "be obvious to apply the teaching of this 
document to the teaching of document Dl". However, it is not clear how the encryption 
mechanisms taught by D2 could be applied to increase security in the method according to 
claim 1 of the present application, since claim 1 uses encryption in step c only. 
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Clarity of claim 1 : 

As explained above, the features of claim 1 have the following consequences: The same keys 
are used for protecting the watermark as well as the transmission. This simplifies the key 
management on the copyright owner's side (only one pair of keys must be maintained) as well 
as the verification of the received message and watermark (because not only message 
recovery/verification, but also watermark detection/verification can profit from the same key 
infrastructure). 

Hence, claim 1 provides a solution to the problem mentioned above, i.e. to provide a simple 
way for generating a stego data set and transmitting the same, in particular by making key 
management and watermark verification easier. 

It is true that the embodiment described by the application is much more complex, using 
several watermarks, etc., which provides additional advantages. However, the features listed 
in the claim 1 are per se sufficient to reach the above advantageous consequences. Hence, 
there is no need to narrow claim 1 . 

Decision T 1055/92 of the boards of appeal of the European patent office states in its 
headnotes: 

1. The form and content of the claims in a European patent application are governed by the 
requirements of Article 84 and Rule 29 EPC. According to Article 84, the claims shall 
define the matter for which protection is sought. 

This function of the claims should be clearly distinguished from the requirement that the 
European patent application must disclose the invention in such a way that it enables a 
person skilled in the art to carry out that same invention. 

2. Under Article 83, sufficient disclosure is required in a European patent application, Le. 
in the application as a whole, comprising the claims, together with the description and 
the drawings, but not of an individual claim as such. 

3. A claim in a European patent application must comprise the essential features of the 
invention (see T 32/82, OJ EPO 1984, 354); the essential features should in particular 
comprise those features which distinguish the invention from the closest prior art. 
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Even though this decision is based on the articles of the European Patent Convention, it is 
fully applicable to the corresponding regulations of the PCT. 

In the present case, claim 1 does comprise all the "essential features", i.e. those features which 
distinguish the invention from the closest prior art. 

As to the term "encoding" that was objected to, it is the same term as used in the description, 
see e.g. page 19, lines 25 and 35, page 20, lines 1, 4, 7 and 37, page 28, hnes 33 and 35, etc. 
The feature "encoding the watermark using at least one key..." of claim 1 relates to the fact 
that the watermark is generated using this key, e.g. by using the function OWEA as described 
on pages 23 and 24 of the application. 

It is not clear what the opinion means by the sentence "Moreover, it is not clear how the 
claimed subject-matter solves the problem set out in the description relating to the copyright 
holder having to reveal the private key, since on of the claimed altematives reales to use only 
of the public key" on sheet 6, 4^^ paragraph. 

When the copyright holder uses his private key for encoding the watermark (as it is done in 
phase 3 on page 23 of the application), he simplifies the watermarking process because he 
does not need to keep track of additional secret keys. When he uses his public key (as is done 
in phase 4 on page 24 of the application), the buyer has a means for verifying if the watermark 
is indeed embedded in the picture by relying on the public key of the copyright holder. 



The examiner's comments regarding claim 4 are gratefully acknowledged. The claim has been 
amended accordingly, see above. 



The examiner objects that claim 5 is not supported by the description. The features of claim 5 
have therefore been added to page 9, lines 27, 28 of the description. 



The objections regarding claim 6 should be overcome by the amendments mentioned above. 
As explained above, the term "watermark of a first type" refers to either the detection 
watermark or the private watermark. Claim 7, where the watermark is generated using the 



Claim 4 



Claim 5 



Claims 6, 7 
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hash value of the private key, refers to the detection watermark. The claim is therefore not in 
contradiction with the description. 

Claim 9 

It has been objected that in the disclosure there is no support for more than one second 
watermark. Claim 9 is clearer now as it says that at "least one watermark of a second type" is 
generated. As described on page 33, lines 36ff, the cover image can be divided into a plurality 
of adjacent blocks, wherein a watermark is applied to each block, hence more then on 
watermark can be generated. 

Claim 10 

The objection against claim 10 should be overcome by the above amendment. 
Claim 12 

It is stated that it is unclear what "erased elements" can be. The claim says that m' has the 
same length as the symbol vectors. However, depending on how m is embedded into the data 
and on what changes the data "suffers" before the watermark is read, some information may 
obviously be lost. For instance, if m is added to some Fourier components of an original 
image and the image is then "shrunk", some Fourier components may be lost, i.e. erased, in 
which case it would not make sense to say that m' has the same length as the symbol vectors. 
Hence, claim 12 should be clear: it just implies that, if some elements have been lost due to 
imperfect transmission/handling of the stego data, m' may of course loose some of its 
elements. 

Claim 18 

Claim 18 has been rejected as being obvious in view of Dl and D2. However, same as claim 
1, it suggests using an asymmetric key pair when generating a watermark. As explained for 
claim 1 above, the application of asymmetric key pairs in the generation of watermarks is 
unusual and not obvious. We refer to our arguments relating claim 1. 

Claim 19 (corresponding to original claim 41) also involves using an asynmfietric key pair in 
watermark generation. 
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Claim 21 (corresponding to original claim 39) has been rejected as being obvious in view of 
D6. It is, however, not true that D6 teaches "how to generate a stego data set and transmit it 
between two parties whilst registering certification data at a third party" and that "the only 
difference between this disclosure and the ... claim ... is the use of a hash function instead of 
a cryptographic key in the latter", 

D6 teaches that each party is equipped with a "configuration vector", which defines the cryp- 
tographic permissions it has. When registering its keys, a party transmits the configuartion 
vector to a trusted party, which then generates a key certificate. Subsequently, secure trans- 
missions between different parties are carried out without involving the trusted party. 

In contrast to this, the claimed method relates to a transmission between two parties H and B 
that does involve a trusted third party. In addition to this, claim 21 comprises the step of 
generating a stego data set from the cover data set, which finds no correspondence in D6. 

In fact, D6 is concerned with a technical field that is very different from the claimed method. 
In D6, the trusted third party ensures the integrity of keys and prevents the parties from using 
cryptographic operations without permission. The present application relates to an improve- 
ment in the transmission of watermark protected (stego) data. Hence, a person skilled in the 
art would not even consider D6 when looking for a solution to the problem solved by the pre- 
sent application. 

It is therefore believed that the present claims are allowable over the state of the art. 

Further amendments to the description are put off until entry into the regional phase. 

If the Examiner finds it advisable to conduct an informal telephone conference in order to 
expedite the examination, she/he is invited to contact the undersigned. 

Very truly yours, 
E. B L U M & CO, 
i.V. 



Dr. K. Sutter 
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propose a digital signature scheme for watermarking fac- 
simile documents (binary images) . This scheme modify the 
length of certain runs of data with a single bit of the 
signature data. 

Disclosure of the Invention 

It is an object of the present invention to 
provide a system of the type mentioned above that pro- 
vides a simple and secure way of generating and transmit- 
ting watermarked data. This object is achieved by the 
methods described in the claims. 

In one aspect of the invention, this object 
is achieved by an integrated solution method for generat- 
ing and transmitting a data set between two parties H and 
B comprising the steps of a) providing a cover data set 
corresponding to the data set to be transmitted, b) gen- 
erating a stego data set of said cover data set by 
embedding at least one digital watermark in said cover 
data set, wherein said watermark is encoded using at 
least one key of an asymmetric cryptographic key pair of 
H, said key pair comprising a secret private key and a 
known public key derived therefrom, and c) encrypting 
said stego data set using said key pair of H, d) trans- 
mitting said encrypted stego data set from said party H 
to said party B. 

Preferably, the private and public keys of 
party H are an elliptic curve key pair. 

The party creating the watermark can embed a 
detection, a private and a public watermark in the data 
set, wherein the detection or the private watermark is 
derived from the private key, the public watermark from 
the public key. The public watermark can be detected by 
third parties while the private watermark can only be de- 
tected using private information. Preferably, the detec- 
tion or private watermark is not derived from the private 
key directly but from a hash value of the same and/or 
from a signature generated with the same, such that the 
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Claims 



1. A method for generating and transmitting a 
data set between two parties H and B comprising the steps 
of 

a) providing a cover data set (CD) corre- 
sponding to the data set to be transmitted, 

b) generating a stego data set (SD) of said 
cover data set (CD) by embedding at least one digital wa- 
termark in said cover data set (CD) , wherein said water- 
mark is encoded using at least one key of an asymmetric 
cryptographic key pair (psH, vsh) of H, said key pair 
comprising a secret private key (psh) and a known public 
key (vsh) derived therefrom, 

c) encrypting said stego data set (SD) using 
said key pair (psH, vsh) of H, 

d) transmitting said encrypted stego data set 
from said party H to said party B. 

2. The method of claim 1, wherein said step 

c) comprises 

generating a mask message (B| | SN) , 
generating a signature (DSSMRq(psh, B||SN)) 

of said mask message (B||SN) using said secret private 

key (psfj) , and 

using said signature of said mask message for 
seeding an encryption algorithm for said stego data set 
(SD) . 

3. The method of claim 2 wherein said signa- 
ture (DSSMRg(psh, B||SN)) of said mask message (B||SN) 
is transmitted from H to B . 

4. The method of one of the claims 2 or 3 
wherein said encryption algorithm comprises the step of 
calculating the Fourier transform of said stego data set 
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(SD) , modifying the phase components of the Fourier 
transform using a pseudo-random pattern seeded by said 
signature (DSSMRqCpsh, B||SN)) of said mask message 
(B||SN) and calculating the inverse Fourier transform for 
generating the encrypted stego data set. 

5. The method of one of the preceding claims 
wherein said key pair (psH, vsh) of H is an elliptic 
curve key pair. 

6. The method of one of the preceding claims 
wherein said step b) comprises the step of generating at 
least one watermark of a first type, wherein said water- 
mark of a first type is encoded using said private key 
(PSh) of H, 

7. The method of claim 6 wherein said 
watermark of a first type is encoded using a hash value 
(crh(psH)) of said private key (psh) and can be decoded 
by using said hash value (crhCpsn)) - 

8. The method of claim 6 wherein said water- 
mark of a first type is encoded using a hash value 
(crh(OADcD)) of a signature (OADcd) generated using said 
private key (psn) - 

9. The method of one of the preceding claims 
wherein said step b) further comprises the step of gener- 
ating at least one watermark of a second type, wherein 
said watermark of a second type comprises a payload 
(PCh[AM]) derived from the Fourier transform of said 
cover data (CD) . 

10. The method of one of the preceding claims 
wherein said step b) comprises the steps of: 
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i) providing a message (si, S2 , sj^) to 
be transmitted in said at least one watermark, said mes- 
sage consisting of a plurality of symbols, 

ii) providing a pseudo random generator 

5 seeded with a seed value derived from a key of said key 
pair (psH, vsh) of H or a hash value thereof, 

iii) encoding said message using values from 
said pseudo random generator 

iv) using the said encoded message (m) for 
10 embedding said watermark. 



11. The method of claim 10 wherein said step 
iii) comprises: 

for each of said symbols (si), generating a 
15 pseudo random sequence of numbers (vi, V2 , ...) by a said 
pseudo random generator, 

using the value of each said symbols (si) for 
selecting a sub-sequence within said pseudo random se- 
quence for forming a symbol vector (r^) , and 

adding said symbol vectors (r^) to generate 
said encoded message (in) . 



20 



25 



12. The method of claim 11 comprising the 
following steps for decoding said message: 

extracting a read-out message (m' ) from said 
watermark, said read-out message being a vector having 
the same length, if erased elements are replaced by zero, 
as said symbol vectors (r^) , 

generating all possible values of said symbol 
vectors (r^) using said pseudo random generator seeded 
with said seed, and 

calculating the cross-correlation between 
said pseudo random sequences of numbers (vi, V2 , ...) and 
said read-out message (m' ) for retrieving said symbols 
35 (Si) . 



30 
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13 . The method of claim 10 wherein said step 
iii) comprises: 

for each bit (bj ) of said symbol sequence 
(si, S2 , sj^) , deriving pseudo random vectors (^j*) 

having elements 1 or -1 from a said pseudo random genera- 
tor, which pseudo random generator preferably generates 
m-sequences or Gold codes, and 

depending on the value of said bit (bj ) , mul- 
tiplying said pseudo random vector (rj*) with +1 or -1 to 
generate a modified pseudo random vector, and adding said 
modified pseudo random vectors to generate an encoded 
message (m) . 

14. The method of claim 13 comprising the 
following steps for decoding said message: 

extracting a read-out message (m' ) from said 

watermark, 

deriving said pseudo random vectors (rj*) 
from said pseudo random generator seeded with a said 
seed, and 

calculating the cross correlation between 
each of said pseudo random vectors (rj*) and said read- 
out message (m' ) for retrieving the corresponding bit 
(bj) of the said symbol sequence (s^, S2 , sj^) . 

15. The method of one of the claims 10 - 14 
wherein the position of components to be modulated by 
each value of the encoded message (m) is given by a 
pseudo random generator seeded by a key known by both H 
and B. 

16. The method of one of the preceding claims 
comprising the step of encoding a message for being em- 
bedded in said watermark by using symbol based Reed Solo- 
mon codes as error control codes. 
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17. The method of one of the preceding claims 
wherein said step b) further comprises the step of calcu- 
lating a logarithm of said cover data set (CD) before em- 
bedding said watermark for embedding said watermark in a 
perceptually flat domain. 

18. A method for generating a stego data set 
(SD) from a cover data set (CD) comprising the steps of: 

generating at least one message (ID(-n) , 
digitally signing said message (IDqj^) using 
an asymmetric cryptographic key pair (p^, v^) and a sig- 
nature generating algorithm (DSSMR) with message recovery 
for generating a digital signature (OADcd) / and 

generating said stego data set (SD) of said 
cover data set (CD) by generating at least one digital 
watermark, wherein said digital signature (OADqd) is used 
for deriving a seed for generating said watermark. 

19. A method for embedding a watermark in a 
cover data set for generating a stego data set, compris- 
ing the steps of 

calculating at least some magnitude Fourier 
components (MC) of said cover data set (CD) , 

applying an authentication function (AF) for 
generating a value (AM) derived from said Fourier compo- 
nents (MC) , 

ciphering said value (AM) using a secret key 
(PCh) of an asymmetric key pair (pCh, vc„) for generating 
a ciphered message, and 

embedding said ciphered message as a payload 
in a public watermark. 

20. A method for verifying the originality of 
a possibly modified stego data set generated with the 
method of claim 19 comprising the step of reading said 
value (AM) by decoding said ciphered message using the 
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public key of said key par and comparing said magnitude 
Fourier components to said stego data set. 

21. Method for generating and transmitting a 
data set between two parties H and B, comprising the 
steps of 

providing a cover data set (CD) corresponding 
to the data set to be transmitted, 

generating a stego data set (SD) of said 
cover data set (CI) at a party H by generating at least 
one digital watermark in said cover data set (CD) , 

transmitting a hash value of said stego data 
set (SD) to a registration party (O) , and 

permanently storing certification data (CCD) 
at said registration party (O) , said certification data 
comprising said hash value of said stego data set (SI) , a 
digital time stamp (TVP) and information designating said 
party H, 

22. The method of claim 21 further comprising 
the steps of generating a digital signature of said cer- 
tification data (CCD) using an asymmetric cryptographic 
key pair (psQ/ vsq) of said registration party (O) , 
transmitting said certification data (CCD) and said digi- 
tal signature to said party H, and verifying said digital 
signature at said party H by using a public key (vsq) of 
said key pair of said registration party. 
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1. Basis of the opinion 

1 This opinion has been drawn on the basis of (substitute sheets which have been furnished to the receiving Office 
in response to an invitation under Article 14 are referred to in this opinion as "originally filed " ). 

Description, pages: 

1 -51 as originally filed 

Claims, No.: 

1 -42 as originally filed 

Drawings, sheets: 

1/9-9/9 as originally filed 

2. The amendments have resulted in the cancellation of: 

□ the description, pages: 

□ the claims, Nos.: 

□ the drawings, sheets: 

3. This opinion has been established as if (some of) the amendments had not been made, since they have been 
considered to go beyond the disclosure as filed (Rule 70.2(c)): 

4. Additional observations, if necessary: 

III. Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 

The questions whether the claimed invention appears to be novel, to involve an inventive step (to be non-obvious), 
or to be industrially applicable have not been and will not be examined in respect of: 

□ the entire international application, 

Kl claims Nos. 2-17, 20, 22-25, 27, 31-35, 38, 40, 42. 

because: 

□ the said international application, or the said claims Nos. relate to the following subject matter which does 
not require an international preliminary examination (specify): 
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^ the description, claims or drawings {indicate particular elements beloW) or said claims Nos. 2-1 7, 20, 22-25, 
27, 31-35, 38, 40, 42 are so unclear that no meaningful opinion could be formed (specify): 

see separate sheet 

□ the claims, or said claims Nos. are so inadequately supported by the description that no meaningful opinion 
could be formed. 

□ no international search report has been established for the said claims Nos. . 

IV. Lack of unity of invention 

1 . In response to the invitation {Fomn PCT/i PEA/405) to restrict or pay additional fees, the applicant has: 

□ restricted the claims. 

□ paid additional fees. 

□ paid additional fees under protest. 

□ neither restricted nor paid additional fees. 

2. S This Authority found that the requirement of unity of invention is not complied with for the following reasons 

and chose, according to Rule 68.1 , not to invite the applicant to restrict or pay additional fees: 

see separate sheet 

3. Consequently, the following parts of the international application were the subject of international preliminary 
examination in establishing this opinion: 

^ all parts. 

□ the parts relating to claims Nos. . 

V, Reasoned statement under Rule 66.2(a)(ii) with regard to novelty, Inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 

Novelty (N) Claims 

Inventive step (IS) Claims 1,18. 29, 30, 36, 37, 39 : No 

Industrial applicability (lA) Claims 
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2. Citations and explanations 
see separate sheet 

VII. Certain defects in the international application 

The following defects in the form or contents of the international application have been noted: 
see separate sheet 

VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 
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Concerning Boxes III and Vlil 

The various definitions of the invention given in independent claims ... are such that the 
claims as a whole are not clear and concise, contrary to Article 6 PCT. It is thus 
rendered difficult for third parties to ascertain the extent of protection which is sought, 
by the Applicant. 

The claims should be recast to include only the minimum necessary number of 
independent claims in any one category, with dependent claims as appropriate (Rule 
6.4 (a)-(c) PCT). 

This objection is caused in part by the fact that claims 18, 19, 26, 29 and 36 use the 
formulation "especially for step (b) of claim claims 30, 39 and 41 use the wording 
"especially of one of the preceding claims"; and claim 28 uses the wording "preferably 
as generated in one of claims 25 or (sic) 26". Words such as "especially" and 
"preferably" are not at all limiting (see International Guidelines, PG-III, 4.6). Thus, 
claims 18, 19, 26, 28, 29, 30, 36, 39 and 41 must be considered as being independent 
claims. (Claim 21 is, by any definition, an independent claim). 

The fact that said claims are independent results in a plethora of alleged inventions 
being claimed in the present international application. This results in a lack of unity, as 
discussed with regard to Box IV below. For the purposes of efficiency, and until the 
claims have been limited or the aforementioned wording has been removed, the IPEA 
only intends to examine the independent claims as far as the requirements of Article 33 
PCT are concerned, and the first set of claims (1 to 17) as far as the requirements of 
Article 6 PCT are concerned. 

Concerning Box IV 

The following document is cited :- 

D1 Delaigle et al.: "Digital Watermarking", Proceedings of the SPIE, Vol. 

2659, February 1996, pages 99-110 
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Comparison of the first alleged invention (claims 1 to 18, 41 and 42) with the disclosure 
of document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- encoding a watermark using at least one key of an asymmetric cryptographic key pair, 

- encrypting the stego data set using the key pair, and 

- transmitting the encrypted stego data set (claim 1 only). 

Comparison of the second alleged invention (claims 19 to 38) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- calculating a Fourier transform of at least a part of a cover data set to generate 
Fourier components, 

- modulating at least a part of the Fourier components using a template modulation 
pattern, 

- using an inverse Fourier transform to generate a stego data set, 

- calculating a Fourier transform of a possibly scaled and/or rotated version of the stego 
data set to generate Fourier components thereof, 

- calculating a log-polar or log-log transform of these Fourier components, 

- calculating the cross-correlation between the log-polar or log-log transform of said 
modulation pattern and said log-polar or log-log transform of the Fourier components of 
the stego data set (claim 19 only). 

Comparison of the third alleged invention (claims 39 and 40) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- transmitting a hash value of the stego data set to a registration party, and 

- storing certification data at the registration party, the certification data comprising a 
hash value of the stego data set (claim 39). 

Thus, the differences between the claims of the different groups of inventions and the 
disclosure of document D1 are totally different between invention groups. Therefore, 
the independent claims on file are not linked together by a single general inventive 
concept, as required by Rule 13.1 PCT. 
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The IPEA has chosen not to invite the Applicant to pay additional examination fees 
pursuant to Rule 68.1 PCT since, as pointed out above, the lack of unity seems to arise 
(for the most part) from the choice of claim wording adopted, and could be remedied by 
appropriate wording amendments. 

Concerning Box V 

The following further documents are cited : 
D2 : EP-A-0 534 419 

D3 : Zhao et al: "Embedding Robust Labels into Images for Copyright 

Protection", Proceedings of the Knowright Conference, Proceedings of 
The International Congress on Intellectual Property Rights for 
Specialized Information, Knowledge and New Technology, 21^' August 
1995, pages 242-251, XP000603945 

D4 : Ruanaidh et al: "Phase Watermarking of Digital Images", Proceedings 
of The International Conference on Image Processing (IC, Lausanne, 
Sept. 16"' - 19'^ 1996, Vol. 3, 16"^ September 1996, pages 239-242, 
XP0001 99952, Institute of Electrical and Electronics Engineers 

D5 : FR-A-2 740 897 

D6 : EP-A-0 539 726 

As pointed out above, a complete examination has not been carried out. Nonetheless, 
the following objections can already be identified. 

Claims 1 and 18 

The subject-matter of these independent claims lacks an inventive step with respect to 
the combination of the disclosures of documents D1 and D2, and therefore does not 
meet the requirement set out in Article 33 (3) PCT. 

Document D1 teaches the skilled person how to watermark digital images using, inter 
alia, a copyright owner's secret key. 
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Document D2 teaches the skilled person how to increase cryptographic security by 
using an asymmetric key pair. It would be obvious to apply the teaching of this 
document to the teaching of document D1 in order to make it more difficult to infringe 
the copyright holder's rights, thus arriving at the subject-matter of independent claims 1 
and 18. It is further noted here that claim 1 even includes an alternative in which only 
one of the keys of pair is used, which is even more obvious than using both keys. 

Claim 29 

The subject-matter of this claim is rendered obvious by the disclosure of document D3, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D3 teaches the skilled person how to generate a watermark using a Discrete 
Cosine Transform. This is technically similar to a Fourier transform, and it would be 
obvious to the skilled reader that the latter transform could be used instead In realising 
watermarking algorithms described in document D3, thus arriving at the subject-matter 
of independent claim 29. 

Claim 30 

The subject-matter of this claim is rendered obvious by the disclosure of document D4, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D4 teaches the skilled person how to generate a watermark using a Discrete 
Fourier Transform, by altering, inter alia, the phase components resulting from the 
application of said transform. It would be obvious to adapt the teaching of document D4 
such that the process of independent claim 30, requiring modification of the magnitude 
components, is carried out. 

Claim 36 

The subject-matter of this claim is rendered obvious by the disclosure of document D5, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D5 teaches the skilled person how to add watermark to, for example, a 
digital audio signal, by splitting the audio signal up Into blocks and carrying out a 
transformation such as a Fourier transformation. It Is also mentioned that the technique 
can be applied to image signals. In this case, it would be obvious to the skilled person 
to split the image up Into three dimensional spatio-temporal blocks which are, per se, 
known In the art. 
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Claim 37 

The subject-matter of this claim is rendered obvious by the disclosure of any of the 
documents D3, D4 and D5, and thus does not meet the requirement set out in Article 
33 (3) PCT. 

Each of these documents teaches the skilled person how to generate a watermark 
using cover data transformed into the spatial frequency domain. Lapped Orthogonal 
Transforms are just one of several well known ways of transforming images into the 
spatial frequency domain, and their use instead of the transforms disclosed in any of 
the documents D3 to D5 therefore cannot be considered as being of any inventive 
significance. 

Claim 39 

The subject-matter of this claim is rendered obvious by the disclosure of document D6, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D6 teaches the skilled person how to generate a stego data set and transmit 
it between two parties, whilst registering certification data at a third party. The only 
difference between this disclosure and the subject-matter of independent claim 39 is 
the use of a hash function instead of a cryptographic key in the latter. However, such 
hash functions and their advantages are well known in the art, and their use in the 
context of the system disclosed in document D6 thus cannot be considered as being of 
any inventive significance. 

Concerning Box VII 

The claims are not in the two-part form defined in Rule 6.3 (b) PCT. 

The inclusion by reference of the priority document may be objectionable under certain 
national or regional jurisdictions (e.g. Europe). 

The abbreviation "IAD" appearing on page 13, line 33 has not been previously defined. 
Concerning Box VIII 

Claims 1, 3, 5 to 7, 9, 10, 12 and 13 lack clarity, and therefore do not meet the 
requirement set out in Article 6 PCT. 
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Claim 1 

This claim is far too vaguely and speculatively worded. It is, for example, not clear from 
the present claim, how the various levels of security referred to in the description are 
realised, since only one watermark and only one key need be used, according to 
certain claimed alternatives. In the case of the other alternatives, i.e. more than one 
watermark and a second (public) key, it is completely obscure what is done with these 
items. 

From the description it would appear that a detection watermark is embedded, followed 
by a first layer of cryptographic protection, followed by embedding of a private 
watermark, followed by more cryptographic protection, followed by embedding of a 
public watermark and finally a third layer of cryptographic protection (see, in particular, 
pages 23 and 24). 

It is furthermore not clear, whether "encoding" in the claim is the same as "encrypting" 
in the description. 

Moreover, it is not clear how the claimed subject-matter solves the problem set out in 
the description relating to the copyright holder having to reveal the private key, since 
one of the claimed alternatives reales to use only of the public key. 

Claim 4 

There is no support in the description for the features of this claim, in particular pages 
30 to 33 (section 1 1 lb) do not mention modulation of the phase components. 

Claim 5 

There is no support in the description for the features of this claim. 
Claim 6 

This claim implies, by the use of the word "further", that claim 1 does not require the 
generation of a first watermark, and thus contradicts claim 1 , which clearly specifies 
such a generation in step (b). 

Moreover, it is not clear if "at least a first watermark" means "at least one example of a 
first type of watermark" or "a first type of watermark, a second type of watermark", etc. 
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Claim 7 

Claim 6 implies that the first watermark is the private watermark (which, according to 
pages 23 and 24 is encrypted using the private key (pSh)). Claim 7 then implies that the 
first (private) watermark is encrypted using a hash value, which contradicts said 
description pages. 

Claim 9 

There is no support in the description for more than one second watermark. 

Further, this claim contradicts page 24, line 4, according to which the transform is 
carried out on the cover data (CD). 

Claim 10 

Step (ii) implies that it is possible to use both keys (pSh and vSh) can be used as seeds, 
which contradicts page 31, line 18 of the description. 

Claim 12 

It is not at all clear from the claim, what "erased elements" might be. Why, and by 
whom or what have they been erased ? 
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I. Basis of the report 

1 . This report has been drawn on the basis of {substitute sheets which have been furnished to the receiving Office in 
response to an invitation under Article 14 are referred to in this report as "originally filed" and are not annexed to 
the report since they do not contain amendments.): 

Description, pages: 

1-8,10-51 as originally filed 

9 as received on 28/08/1 999 with letter of 26/08/1 999 

Claims, No.: 

1 .22 as received on 28/08/1 999 with letter of 26/08/1 999 

Drawings, sheets: 

1/9-9/9 as originally tiled 

2. The amendnnents have resulted in the cancellation of: 

□ the description, pages: 

H the claims, Nos.: 23-42 

□ the drawings, sheets: 

3. □ This report has been established as if (sonne of) the amendnnents had not been made, since they have been 

considered to go beyond the disclosure as filed (Rule 70.2(c)): 

4. Additional observations, if necessary: 



iV. Lack of unity of invention 

1 . in response to the invitation to restrict or pay additional fees the applicant has: 

□ restricted the claims. 

□ paid additional fees. 

□ paid additional fees under protest. 
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□ neither restricted nor paid additional fees. 

2. H This Authority found that the requirement of unity of invention is not complied and chose, according to Rule 

68.1 , not to invite the applicant to restrict or pay additional fees. 

3. This Authority considers that the requirement of unity of invention in accordance with Rules 13.1, 13.2 and 13.3 is 

□ complied with. 

H not complied with for the following reasons: 
see separate sheet 

4. Consequently, the following parts of the international application were the subject of international preliminary 
examination in establishing this report: 

^ all parts. 

□ the parts relating to claims Nos. . 

V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 



Novelty (N) 


Yes: 


Claims 


1-22 




No: 


Claims 




Inventive step (IS) 


Yes: 


Claims 


1-17 




No: 


Claims 


18-22 


Industrial applicability (lA) 


Yes: 


Claims 


1-22 




No: 


Claims 





2. Citations and explanations 
see separate sheet 

VII. Certain defects in the international application 

The following defects in the forni or contents of the international application have been noted: 
see separate sheet 
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VIII. Certain observations on the international application 

The following observations on the clarity of the claims, description, and drawings or on the question whether the 
claims are fully supported by the description, are made: 

see separate sheet 



Form PCT/IPEA/409 (Boxes l-VIM. Sheet 3) (January 1994) 



INTERNATIONAL PRELIMINARY International application No. PCT/IB98/01 500 
EXAMINATION REPORT - SEPARATE SHEET ^ 

Concerning Box IV 

The following document is cited :- 

D1 : Delaigle et al.: "Digital Watermarking", Proceedings of the SPIE, Vol. 
2659, February 1996, pages 99-110 

Comparison of the first alleged invention (claims 1 to 17) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- encoding a watermark using at least one key of an asymmetric cryptographic key pair, 

- encrypting the stego data set using the key pair, and 

- transmitting the encrypted stego data set. 

Comparison of the second alleged invention (claim 18) with the disclosure of document 
D1 shows that the following technical features could be considered as contributing to 
the prior art as represented by document D1: 

- generating at least one message 

- digitally signing said message using an asymmetric cryptographic key pair, and 

- using the signature as a seed for watermark generation. 

Comparison of the third alleged invention (claims 19 and 20) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 

- calculating at least some magnitude Fourier components of a cover data set, 

- applying an authentification function to said components to generate an 
authentification message, 

- encrypting the authentification message using a secret key of an asymmetric 
cryptographic key pair, and 

- embedding said encrypted message as a payload in a public watermark. 

Comparison of the fourth alleged invention (claims 21 and 22) with the disclosure of 
document D1 shows that the following technical features could be considered as 
contributing to the prior art as represented by document D1: 
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- transmitting a hash value of the stego data set to a registration party, and 

- storing certification data at the registration party, the certification data comprising a 
hash value of the stego data set, a digital time stamp and information designating the 
originator of the stego data set. 

Thus, the differences between the claims of the different groups of inventions and the 
disclosure of document D1 are totally different between invention groups. Therefore, 
the independent claims on file are not linked together by a single general inventive 
concept, as required by Rule 13.1 PCT. 

The I PEA chose not to invite the Applicant to pay additional examination fees pursuant 
to Rule 68.1 PCT since, as pointed out above, the lack of unity seemed to arise (for the 
most part) from the choice of claim wording adopted and the desire to protect subpart 
of the invention, and could have been remedied by appropriate wording amendments. 

Concerning Box V 

The following further documents were cited in the Written Opinion : 
D2 : EP-A-0 534 419 

D3 : Zhao et al: "Embedding Robust Labels into Images for Copyright 

Protection", Proceedings of the Knowright Conference, Proceedings of 
The International Congress on Intellectual Property Rights for 
Specialized Information, Knowledge and New Technology, 21^' August 
1995, pages 242-251, XP000603945 

D4 : Ruanaidh et al: "Phase Watermarking of Digital Images", Proceedings 
of The International Conference on Image Processing (IC, Lausanne, 
Sept. 16"^ - 19^ 1996, Vol. 3, le"' September 1996, pages 239-242, 
XP0001 99952, Institute of Electrical and Electronics Engineers 

D5 : FR-A-2 740 897 

D6 : EP-A-0 539 726 
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The following documents are cited for the first time in this Report, following the drafting 
of certain claims as being indisputably independent : 

D7 : Delaigle J.-F. et al: "Digital Images Protection Techniques in a 
Broadcast Framework: An Overview", PROCEEDINGS OF THE 
EUROPEAN CONFERENCE ON MULTIMEDIA APPLICATIONS. 
SERVICES AND TECHNIQUES, Vol. 2, 28 - 30 May 1996, pages 711- 
727, XP0001 99920, Louvain la Neuve (BE) 

D8 : Zhao et al: "A WWW Service to embed and prove digital copyright 
watermarks" PROCEEDINGS OF THE EUROPEAN CONFERENCE 
ON MULTIMEDIA APPLICATIONS. SERVICES AND TECHNIQUES, 
vol. 2, 28 - 30 May 1996. pages 695-709. XP000199921. Louvain la 
Neuve (BE) 

As pointed out with respect to clarity and Box VIII below, various claims lack clarity. 
Nonetheless, should these clarity objections be met during further prosecution of this 
application in the national / regional phase, then the comments below regarding 
inventive step would be applicable. 

Claims 1 to 17 • 

The subject-matter of these claims requires that, rather than a single private key. an 
asymmetric pair of cryptographic keys is used in both generating a watermark and in 
encrypting the watermarked data. Whilst, as set out in the prior art summary below, 
both asymmetric key pairs and watermarks using such pairs are known, there is no 
prior art document which suggests that the same pair be used for watermarking and 
encrypting the watermarked data set. This would appear to be a step back from what 
would be the result of a combination of document D7. disclosing the use of asymmetric 
cryptographic key pairs, with, for example, a document D2 relating to cryptography in 
general, namely that, for full security, different keys should be used for watermarking 
and final encryption of the result of watermarking. 

Claim 18 

The subject-matter of this claim is rendered obvious by the disclosure of document D3. 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
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Document D3 teaches the skilled person that a message, relating to features extracted 
from an image to be watermarked, can be digitally signed using a private key and then 
used as a seed for watermark generation (in particular, for seeding the positions at 
which said watermark is inserted) - see the top of page 244. The only difference with 
respect to the subject-matter of independent claim 18 is the use of an asymmetric 
cryptographic key pair. Despite the arguments of the Applicant relating to the 
complexity of such key pairs, the IPEA does not consider that this fact alone would put 
the skilled person off at least considering using them in place of a private key. 
Moreover, claim 18 does not specify how the method is adapted to the use of an 
asymmetric cryptographic key pair. Thus, the subject-matter of claim 18 is derivable in 
an obvious manner from the disclosure of document D3. 

Claims 19 and 20 

The subject-matter of these claims Is rendered obvious by the disclosure of document 
D4 taken in combination with the disclosure of any of the documents D1 , D3 and D7, 
and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D4 teaches the skilled person how to generate a watermark using a Discrete 
Fourier Transform, by altering, inter alia, the phase components resulting from the 
application of said transform. It would be obvious to adapt the teaching of document D4 
such that the process of independent claim 30, requiring modification of the magnitude 
components, is carried out. particularly since this possibility is also hinted at in the 
disclosure of document D4. 

Moreover, each of the documents D1, D3 and D7 discloses the use of keys in 
watermarking. Their use to control the insertion of the watermarks disclosed in 
document D4 is thus an obvious measure to take. The remarks made above with 
respect to the use of asymmetric cryptographic key pairs are applicable to claim 19 
also. 

Claims 21 and 22 

The subject-matter of these claims is rendered obvious by the disclosure of document 
D8, and thus does not meet the requirement set out in Article 33 (3) PCT. 
Document D8 teaches the skilled person how to generate a stego data set and transmit 
It between two parties, whilst registering certification data at a third party (see the 
paragraph labelled (3) at the top of page 705). The only difference between this 
disclosure and the subject-matter of independent claim 39 is the use of a hash function 
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instead of a cryptographic key in the latter However, such hash functions and their 
advantages are well known in the art, and their use in the context of the system 
disclosed in document D8 thus cannot be considered as being of any inventive 
significance. 

Concerning Box VII 

The claims are not in the two-part form defined in Rule 6.3 (b) PCT. 

The inclusion by reference of the priority document may be objectionable under certain 
national or regional jurisdictions (e.g. Europe). 

The abbreviation "IAD" appearing on page 13, line 33 has not been previously defined. 
Concerning Box VIII 

Claims 1, 4, 6, 7, 12, 18 and 19 lack clarity and/or support in the description, and 
therefore do not meet the requirement set out in Article 6 PCT. 

Claim 1 

This claim is far too vaguely and speculatively worded. It is, for example, not clear from 
the present claim, how the various levels of security referred to in the description are 
realised, since only one watermark and only one key need be used, according to 
certain claimed alternatives. In the case of the other alternatives, i.e. more than one 
watermark and a second (public) key, it is completely obscure wh^^^ 
itemsJFor example, if only one key of a pair is used ("at least one" means one. or more 
/than one), is it the private or the public key. In the former case, their is very little 
; difference with respect to certain prior approaches. In the case of two keys, are 
different watermarks protected differently ? 

From the description it would appear that a detection watermark is embedded, followed 
by a first layer of cryptographic protection, followed by embedding of a private 
watermark, followed by more cryptographic protection, followed by embedding of a 
public watermark and finally a third layer of cryptographic protection (see. in particular, 
pages 23 and 24). 
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It is furthermore not clear, whether "encoding" in the claim is the same as "encrypting" 
in the description, as "encoding" Is never actually defined In the description. 

Claim 4 

There is no support In the description for the features of this claim, In particular pages 
30 to 33 (section 1 1 lb) do not mention modulation of the phase components. 

Claim 6 

The wording "encoded" is objected to for reasons set out above with respect to claim 1 . 
It Is not clear, where In the description there Is support for use of more than one 
watermark of the first type. 

Claim 7 

Claim 6 Implies that the first watermark is the private watermark (which, according to 
pages 23 and 24 is the type of watermark which Is encrypted using the private key 
(PSh), whereas the public watermark Is encrypted using the public key (vsh)). Claim 7 
then implies that the first (private) watermark Is encrypted using a hash value, which 
contradicts said description pages. 

Claim 12 

It is not at all clear from the claim, what "erased elements" might be. Why, and by 
whom or what have they been erased ? The claim per se must define what this wording 
means. 

Claim 18 

It Is not at all clear what Is meant by the wording "generating at least one message", 
because neither the starting data nor the resulting data Is defined. 
By analogy with the objections to claim 1 , it is not clear, what the public key of the pair 
Is used to encrypt, and what the private key Is used to encrypt. 

Claim 19 

It is not clear what Is meant by "calculating at least some magnitude Fourier 
components". 
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It is not clear what an "authentification value" is. In line with the description, the wording 
"an authentification messaoe " should have been used on this claim. 

It is not clear from the "embedding" strep, that this step uses the public key. 
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propose a digital signature scheme for watermarking fac- 
simile documents (binary images) . This scheme modify the 
length of certain runs of data with a single bit of the 
signature data . 



provide a system of the type mentioned above that pro- 
vides a simple and secure way of generating and transmit- 
ting watermarked data. This object is achieved by the 
methods described in the claims . 



is achieved by an integrated solution method for generat- 
ing and transmitting a data set between two parties H and 
B comprising the steps of a) providing a cover data set 
corresponding to the data set to be transmitted, b) gen- 
erating a stego data set of said cover data set by 
embedding at least one digital watermark in said cover 
data set, wherein said watermark is encoded using at 
least one key of an asymmetric cryptographic key pair of 
H, said key pair comprising a secret private key and a 
known public key derived therefrom, and c) encrypting 
said stego data set using said key pair of H, d) trans- 
mitting said encrypted stego data set from said party H 
to said party B. 

Preferably, the private and public keys of 
party H are an elliptic curve key pair. 

The party creating the watermark can embed a 
detection, a private and a public watermark in the data 
set, wherein the detection or the private watermark is 
derived from the private key, the public watermark from 
the public key. The public watermark can be detected by 
third parties while the private watermark can only be de- 
tected using private information. Preferably, the detec- 
tion or private watermark is not derived from the private 
key directly but from a hash value of the same and/or 
from a signature generated with the same, such that the 
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of the applicant(s) before the competent International Authorities as: ULl ^^^^^ \ 1 common representative 


Name and address: (Family namefollowed by given name; for a legal entity, full official 
designation. The address must include postal code and name of country.) 

E. Blum & Co. 
Vorderberg 11 
CH-8044 Zurich 
Switzerland 


Telephone No. 

01/261 54 54 


Facsimile No. 

01/251 67 17 


Teleprinter No. 
816 559 


1 1 Address for correspondence: Mark this check-box where no agent or common representative is/has been appointed and the 
1 1 space above is used instead to indicate a special address to which correspondence should be sent 



FormPCT/RO/lOl (first sheet) (July 1998) 



See Notes to the request form 




Continuation of Box No. Ill FURTHER APPLICANT(S) AND/OR (FURTHER) INVENTOR(S) 



If none of the following sub-boxes is used, this sheet should not be included in the request 


Name and address: JFamtly name foU owed by given name: for a legal entity, full official 
destgnatton. The address mtist include postal code and name of country. The country of the 
address indtcatedtn this Box is the applicant sState (that is. country) of residence if no State 
of residence IS indicated below.) ^ 

O^RUANAIDH Joseph J.K, 
btudio 11 

Rue Jacques Dalphin 11, Carouge 

CH-1227 Geneva 

Switzerland 


This person is: 

1 1 applicant only 

|X 1 applicant and inventor 

1 1 inventor only (If this check-box 
is marked, do not fill in below.) 


State (that is, country) of nationality; 

IE 


State (that is, country) of residence:. 

CH 


This person is applicant i i all designated | 1 all designated States except rr-i the United States i 1 the States indicated in 

for the purposes of: 1 1 States i | the United States of America of America only LJ the Supplement^^^^^ 


Name and address: (Family name followed by given name; for a legal entity, full offtcial 
designation. The address must include postal code and name of country. The country of the 
address indicatedin this Box is the applicant 'sState (that is, country) of residence if no State 
of residence IS indicated below.) 

PUN Thierry 

60, Chemin de la Gradelle 
CH-1224 Chene-Bougeries 
Switzerland 


This person is: 

[ I applicant only 

1 X I applicant and inventor 

1 1 inventor only (^^//li J c/iec/:-6<?j: 
is marked, do not fill in below.) 


State (that is, country) of nationality: 


State (that is. country) of residence: 


J^^r fK^i!.*JIl!!5'Pf 1 1 ?«»g"^tcd 1 1 all designated Stat*^ except j— i the United Suics i 1 the States indicated in 

for the piuposcs of: | 1 States | | the United States of Amenca LXj of America only | | the Supplement Box 


Name and ^^ess: (Family name followed by given name: for a legal entity, fyll official 
designation. The address must iriclude postal code and name of country, Thecountryofthe 
address tndicatedm this Box is the applicant 'sState (that is, country) of residence if no State 
of residence is indicated below.) ^ 


This person is: 

1 1 applicant only 

1 1 applicant and inventor 

[ 1 inventor only (If this check-box 
is marked, do not fill in below.) 


State (that is, country) of nationality: 


State (that is, country) of residence: 


Jx^'fh^^ii?P" applicant l l all designated | 1 ^1 desi^atcd States except | 1 the United States i 1 the States indicated in 

for the purposes of: I 1 States | | the United States of Amenca | | of America only \ | the Supplement Box 


T^^^^-^C^^ '5^'"^' ^ ^^Sol entity, full official 
designation. The address must include postal code and name of country. Thecountryofthe 
address indicated in this Box is the applicant 'sState (that is. country) of residence if no State 
of residence IS indicated below.) ^ 


This person is: 

1 1 applicant only 

1 1 applicant and inventor 

1 1 inventor only (If this check-box 
is marked, do not fill in below.) 


State (that is, country) of nationality: 


State (that is, country) of residence: 


for A^mfrIUL?J?f Fl Fl ^il* ll^^Snatcd States except r— i the United Sutes f— i the States indicated in 
lor the purposes of: I 1 States | | the United States of America | | of America only | | the Supplemental Box 


I ! Further applicants and/or (further) inventors arc indicated on another continuation sheet. 



Form PCT/RO/IOI (continuation sheet) (July 1998) 



Sheet No- 



Box No.V 



DESIGNATION OF STATES 



The following designations arc hereby made under Rule 4.9(a) YmarJt the applicable check-boxes: at least one must be marked): 
Regional Patent 

H AP ARIPO Patent: GH Ghana, GM Gambia, KE Kenya, LS Lesotho, MW Malawi, SD Sudan, SZ Swaziland, UG Uganda, 
ZW Zimbabwe, and any other State which is a Contracting State of the Harare Protocol and of the PCT 

H EA Eurasian Patent: AM Armenia. AZ Azerbaijan, BY Belarus, KG Kyrgyzstan, KZ Kazakhstan, MD Republic of 
Moldova, RU Russian Federation, TJ Tajikistan, TM Turkmenistan, and any other Slate which is a Contracting State 
of the Eurasian Patent Convention and of the PCT 

H EP European Patent: AT Austria, BE Belgium, CH and LI Switzerland and Liechtenstein. CY Cyprus, DE Germany, 
DK Denmark, ES Spain, FI Finland, FR France, GB United Kingdom, GR Greece, IE Ireland, IT Italy, LU Luxembourg, 
MC Monaco, NL Netherlands, PT Portugal. SE Sweden, and any other State which is a Contracting State of the European 
Patent Convention and of the PCT 

B OA OAPI Patent: BF Burkina Faso, BJ Benin, CF Central African Republic, CG Congo, CI Cote d'l voire, CM Cameroon, 
GA Gabon, GN Guinea, ML Mali, MR Mauritania, NE Niger, SN Senegal, TD Chad, TG Togo, and any other State 
which is a member State of OAPI and a Contracting State of the PCT (if other kind of protection or treatment desired, specify 
on dotted line) :*:■;.. 



National Patent (if other kind of protection or treatment desired, 

13 AL Albania 

13 AM Armenia 

[2 AT Austria 

13. AU Australia 

13 AZ Azerbaijan 

El BA Bosnia and Herzegovina 

IS BB Barbados 

H BG Bulgaria 

H BR Brazil 

(3 BY Belarus 

E! CA Canada 

13 CH and LI Switzerland and Liechtenstein 

El CN China 

S CU Cuba 

(a CZ Czech Republic 

(3 DE Germany 

13 DK Denmark 

Kl EE Estonia 

13 ES Spain 

H FI Finland 

Si GB United Kingdom 

[3 GE Georgia 

S GH Ghana 

13 GM Gambia 

' Bl QW ■ C uiuiija Diis& au 

13 HR Croatia 

H HU Hungary 

ID Indonesia 

IS IL Israel 

S IS Iceland 

H JP Japan 

H KE Kenya 

H KG Kyrgyzstan 

13 KP Democratic People's Republic of Korea .... 



specify on dotted line): 

H LS Lesotho 

Kl LT Lithuania 

13 LU Luxembourg 

13 LV Latvia 

IS MD Republic of Moldova 

El MG Madagascar 

H MK The former Yugoslav Republic of Macedonia 



El MN 

[3 MW 

(3 MX 

H NO 

Kl NZ 

13 PL 

H PT 

Kl RO 

H RU 

13 SD 

El SE 

H SG 

13 SI 

El SK 

El SL 

Bl TJ 

H TM 

H TR 

13 TT 

Kl UA 

S UG 

H us 



Mongolia 

Malawi 

Mexico 

Norway 

New Zealand 

Poland 

Portugal 

Romania 

Russian Federation .... 

Sudan 

Sweden 

Singapore 

Slovenia 

Slovakia 

Sierra Leone 

Tajikistan 

Turkmenistan 

Turkey 

Trinidad and Tobago . . . 

Ukraine 

Uganda 

United States of America . 



H KR Republic of Korea 

B KZ Kazakhstan 

S LC Saint Lucia 

S LK Sri Lanka 

SI LR Liberia 



13 UZ Uzbekistan 

IS VN Viet Nam 

El YU Yugoslavia 

EI ZW Zimbabwe 

Check-boxes reserved for designating States (for the purposes of 
a national patent) which have become party to the PCT after 
issuance of this sheet: 



(3 .GD Grenada 



Precau tiona ry Designation Statement: In addition to the designations made above, the applicant also makes under Rule 4.9(b) all other 
designations which would be permitted under the PCT except any dcsignation(s) indicated in the Supplemental Box as being excluded 
from the scope of this statement. The applicant declares that those additional designations are subject to confirmation and thai any 
designation which is not confirmed before the expiration of 1 5 months from the priority date is to be regarded as withdrawn by the applicant 
at the expiration of that time limit. (Confirmation of a designation consists of the filing of a notice specifying that designation and the 
payment of the designation and confirmation fees. Confirmation must reach the receiving Office within the 15-month time limit,) 



Form PCT/RO/101 (second sheet) (July 1998) 



See Notes to the request form 



Filing date 
of earlier application 
(day/month/year) 


Number 
of earlier application 


Where earlier application is: 


national application: 
country 


regional application:* 
regional Office 


international application: 
receiving Office 


item (I) 

(26/09/97) 

26 September 1997 


97 810 708.4 




EP 




item (2) 










item (3) 











Box No. VI PRIORITY CLAIM 



Sheet No. 



□ Further priority claims are indicated in the Supplemental Box. 



I I The receiving Office is requested to prepare and transmit to the International Bureau a certified copy 
— of the earlier application(s) (only if the earlier application was filed with the Office which Jbr^tfte 
purposes of the present international application is the receiving Office) identified above as itcm(s): 

* Where the earlier application is an ARIPO application, it is mandatory to indicate in the Supplemental Box at least one country party to the Paris 
Convention for the Protection of Industrial Property for which that earlier application was filed (Rule 4JQ(b)(ii)), See Supplemental Box. 



Box No. VII INTERNATIONAL SEARCHING AUTHORITY 



Choiceof International Searching Authority (ISA) 

(if two or more International Searching Authorities are 
competent to carry out the international search, indicate 
the Authority chosen: the two-letter code may be used): 

ISA / EP 



Request to us^ results of earlier search; reference to that search (if an earlier 
search has been tarried out by or requested from the International Searching Authority): 



L^jC^di^ATwnth/year) 

28 August 1998 



Number 
97810708.4 



Country (or regional Office) 
EP Rijswijk 



Box No. VIII CHECK LIST; LANGUAGE OF FILING 



This international application contains 
the following number of sheets: 

request : 4 

description (excluding 
sequence listing part) : 5 1 

claims 12 

abstract : \ 

drawings 9 

sequence listing part 

of description Q 



Total number of sheets 



77 



This international application is accompanied by the item(s) marked below: 

1. H fee calculation sheet 

2, Q] separate signed power of attorney 

3- □ copy of general power of attorney; reference number, if any: 

4, □ statement explaining lack of signature 

5- □ priority document(s) identified in Box No. VI as item{s): 

6. □ translation of international application into (language): 

7. □ separate indications concerning deposited microorganism or other biological material 

8. □ nucleotide and/or amino acid sequence listing in computer readable form 

9. □ other (specify): 



Figure of the drawings which 3 
should accompany the abstract: 


Language of filing of the Enelish 
international application: ^ 


Box No. IX SIGNATURE OF APPLICANT OR AGENT 



Next to each signature, indicate the name of the person signing and the capacity in which the person signs (tf such capacity is not obvious Jrom reading the request). 



E. Blum & Co. Zurich, 25 September 1998 rw 

Paul Ronchi 



1. 


Date of actual receipt of the purported 
international application: 


For rece 




2. Drawings: 


3. 


Corrected date of actual receipt due to later but 
timely received papers or drawings completing 
the purported international application: 






[ 1 received: 


4. 


Date of timely receiptof the required 
corrections under PCT Article 1 1(2): 






1 1 not received: 


5. 


International Searching Authority . , 
(iftwo or more are competent): ioA / 




6. Transmittal of search copy delayed 
1 — 1 until search fee is paid. 





— — — For International Bureau use only 
Date of receipt of the record copy 
by the International Bureau: 



Form PCT/RO/101 (last sheet) (July 1998) 



See Notes to the request form 



F^^NT COOPERATION TRE/^IH 



PCT/IB98/01500 



From the INTERNATIONAL BUREAU 



PCT 

NOTIFICATION CONCERNING 
SUBMISSION OR TRANSMITTAL 
OF PRIORITY DOCUMENT 

(PCT Administrative Instructions, Section 41 1) 


\2 i OKT. 1338 ^ 

E. BLUM & CO. 

Vorderberg 1 1 1 ~ •- / / 7 

CH-8044 Zurich 1..! Jv:;/,,. /h<^ { 

SUISSE }S 


Date of mailing (day/month/year) 

15 October 1998 (15.10.98) 


Applicant's or agent's file reference 
P 1130 


IMPORTANT NOTIFICATION 


International application No. 

PCT/IB98/01500 


International filing date (day/month/year) 

28 September 1998 (28.09.98) 


International publication date (day/month/year) 

Not yet published 


Priority date (day/month/year) 

26 September 1997 (26.09.97) 


Applicant 

DIGITAL COPYRIGHT TECHNOLOGIES AG et a! 



1. The applicant is hereby notified of the date of receipt (except where the letters "NR" appear in the right-hand column) by the 
International Bureau of the priority document(s) relating to the earlier application(s) indicated below. Unless otherwise 
indicated by an asterisk appearing next to a date of receipt, or by the letters "NR", in the right-hand column, the priority 
document concerned was submitted or transmitted to the International Bureau in compliance with Rule 1 7.1 (a) or (b). 



2. This updates and replaces any previously issued notification concerning submission or transmittal of priority documents. 

3. An asterisk*) appearing next to a date of receipt in the right-hand column, denotes a priority document submitted 
or transmitted to the international Bureau but not in compliance with Rule 17.1(a) or (b). In such a case, the attention 
of the applicant is directed to Rule 17.1 (c) which provides that no designated Office may disregard the priority claim 
concerned before giving the applicant an opportunity, upon entry into the national phase, to furnish the priority document 
within a time limit which is reasonable under the circumstances. 

4. The letters "NR" appearing in the right-hand column denote a priority document which was not received by the International 
Bureau or which the applicant did not request the receiving Office to prepare and transmit to the International Bureau, 

as provided by Rule 17.1 (a) or (b), respectively. In such a case, the attention of the applicant is directed to Rule 17.1 (c) which 
provides that no designated Office may disregard the priority claim concerned before giving the applicant an opportunity, 
upon entry into the national phase, to furnish the priority document within a time limit which is reasonable under the 
circumstances. 



Prioritv date Priority application No. Countrv or regional Office Dal;e of receipt 

or PCT receiving Office of prioritv document 

26 Sept 1997 (26.09.97) 97810708.4 EP 14 Octo 1998 (14.10.98) 





Authorized officer 1 1 


The International Bureau of WIPO 




34, chemin des Colombettes 


Marc Salzman Ljkp^^ 


1211 Geneva 20, Switzerland 




Facsimile No. (41-22) 740.14.35 


Telephone No. (41 -22) 338.83.38 / 



Form PCT/IB/304 (July 1998) 



F^^NT COOPERATION TREA^ 



PCT/IB98/01500 



From the INTERNATIONAL BUREAU 



PCT 



NOTIFICATION OF RECEIPT OF 
RECORD COPY 

(PCT Rule 24.2(a)) 



To: 



uKi. vm 



E. BLUM & CO. 
Vorderberg 1 1 
CH-8044 Zurich' 
SUISSE 



Date of mailing (day/month/year) 
02 October 1998 (02.10.98) 


IMPORTANT NOTIFICATION 


Applicant's or agent's file reference 
P 1130 


International application No. 
PCT/IB98/01500 



The applicant is hereby notified that the International Bureau has received the record copy of the international application as 
detailed below. 

Nanne(s) of the applicant(s) and State(s) for which they are applicants: 

DIGITAL COPYRIGHT TECHNOLOGIES AG (for all designated States except US) 
HERRIGEL, Alexander et al (for US) 

28 September 1 998 (28.09.98) 
26 September 1997 (26.09.97) 



International filing date 

Priority date(s) claimed 

Date of receipt of the record copy 
by the International Bureau 

List of designated Offices 



30 October 1998 (30.10.98) 



AP :GH,GM,KE,LS,MW,SD,SZ,UG,ZW 
EA :AM,AZ,BY,KG,KZ,MD,RU,TJ,TM 

EP :AT,BE,CH,CY,DE,DK,ES,FI,FR,GB,GR,IE,IT,LU,MC,NL,PT,SE 
OA :BF,BJ,CF,CG,CI,CM,GA,GN,GW,ML,MR,NE,SN,TD,TG 

National :AL,AM,AT,AU,AZ,BA,BB,BG,BR,BY,CA,CH,CN,CU,CZ,DE,DK,EE,ES,FI,GB,GD,GE,GH, 

GM,HR,HUJD,ILJSJP,KE,KG,KP,KR,KZ,LC^K,LR,LS,LT^U,LV,MD,MG,MK,MN,MW,MX,NO,NZ, 

PL,PT,RO,RU,SD,SE,SG,SI,SK,SL,TJ,TM,TR,TT,UA,UG,US,UZ,VN,YU,ZW 



ATTENTION 



The applicant should carefully check the data appearing in this Notification. In case of any discrepancy between these data 
and the indications in the international application, the applicant should immediately inform the International Bureau. 

In addition^ the applicant's attention is drawn to the information contained in the Annex, relating to: 



[ X 1 time limits for entry into the national phase 




1 I confirmation of precautionary designations 




1 X 1 requirements regarding priority documents 




A copy of this Notification is being sent to the receiving Office and to the International Searching Authority. 


The International Bureau of WlPO 
34, chemin des Colombettes 
1211 Geneva 20* Switzerland 


Authorized officer: (^^^ c ^ 

S. Baharlou 


Facsimile No. (41-22)740.14.35 


Telephone No. {41-22)338.83.38 


Form PCT/IB/301 (July 1998) 


002264116 



^fl^ Ijl^tfiational application No. 

ANNEX T^>RM PCT/IB/301 H PCT/IB 98/0 1500 



INFORMATION ON TIME LIMITS FOR ENTERING THE NATIONAL PHASE 



The applicant is reminded that the "national phase*' nnust be entered before each of the designated Offices indicated in the 
Notification of Receipt of Record Copy (Fornn PCT/IB/301) by paying national fees and furnishing translations, as prescribed by 
the applicable national laws. 

The time limit for performing these procedural acts is 20 MONTHS from the priority date or, for those designated States 
which the applicant elects in a demand for international preliminary examination or in a later election, 30 MONTHS from the 
priority date, provided that the election is made before the expiration of 19 months from the priority date. Some designated (or 
elected) Offices have fixed time limits which expire even later than 20 or 30 months from the priority date. In other Offices an 
extension of time or grace period, in some cases upon payment of an additional fee, is available. 

In addition to these procedural acts, the applicant may also have to comply with other special requirements applicable in 
certain Offices. It is the applicant's responsibility to ensure that the necessary steps to enter the national phase are taken in a 
timely fashion. Most designated Offices do not issue reminders to applicants in connection with the entry into the national 
phase. 

For detailed information about the procedural acts to be performed to enter the national phase before each designated 
Office, the applicable time limits and possible extensions of time or grace periods, and any other requirements, see the relevant 
Chapters of Volume 11 of the PCT Applicants Guide. Information about the requirements for filing a demand for international 
preliminary examination is set out in Chapter IX of Volume I of the PCT Applicant's Guide. 



GR and ES became bound by PCT Chapter II on 7 September 1996 and 6 September 1997, respectively, and may, therefore, 
be elected in a demand or a later election filed on or after 7 September 1996 and 6 September 1997, respectively, regardless of 
the filing date of the international application. (See second paragraph above.) 

Note that only an applicant who is a national or resident of a PCT Contracting State which is bound by Chapter II has 
the right to file a demand for international preliminary examination. 



CONFIRMATION OF PRECAUTIONARY DESIGNATIONS 

This notification lists only specific designations made under Rule 4.9(a) in the request. It is important to check that these 
designations are correct. Errors in designations can be corrected where precautionary designations have been made under 
Rule 4.9(b). The applicant is hereby reminded that any precautionary designations may be confirmed according to Rule 4.9(c) 
before the expiration of 15 months from the priority date. If it is not confirmed, it will automatically be regarded as withdrawn 
by the applicant. There will be no reminder and no invitation. Confirmation of a designation consists of the filing of a notice 
specifying the designated State concerned (with an indication of the kind of protection or treatment desired) and the payment 
of the designation and confirmation fees. Confirmation must reach the receiving Office within the 15-month time limit. 



REQUIREMENTS REGARDING PRIORITY DOCUMENTS 

For applicants who have not yet complied with the requirements regarding priority documents, the following is recalled. 

Where the priority of an earlier national, regional or international application is claimed, the applicant must submit a copy 
of the said earlier application, certified by the authority with which it was filed ("the priority document") to the receiving Office 
(which will transmit it to the International Bureau) or directly to the International Bureau, before the expiration of 16 months from 
the priority date, provided that any such priority document may still be submitted to the International Bureau before that date of 
international publication of the International application, in which case that document will be considered to have been received 
by the International Bureau on the last day of the 1 6-month time limit (Rule 1 7.1 (a)). 

Where the priority document is issued by the receiving Office, the applicant may, instead of submitting the priority 
document, request the receiving Office to prepare and transmit the priority document to the International Bureau. Such request 
must be made before the expiration of the 1 6-month time limit and may be subjected by the receiving Office to the payment 
of a fee (Rule 17.1(b)). 

If the priority document concerned is not submitted to the International Bureau or if the request to the receiving Office 
to prepare and transmit the priority document has not been made (and the corresponding fee, if any, paid) within the applicable 
time limit indicated under the preceding paragraphs, any designated State may disregard the priority claim, provided that no 
designated Office may disregard the priority claim concerned before giving the applicant an opportunity to furnish the priority 
document within a time limit which is reasonable under the circumstances. 

Where several priorities are claimed, the priority date to be considered for the purposes of computing the 1 6-month time 
limit is the filing date of the earliest application whose priority is claimed. 



Form PCT/IB/301 (Annex) (July 1998) 



002264116 



The demand must be filed directly with 
with the one chosen by the applicant. 

IPEA/.EP 



^^mpei 

THefulina 



tent International Preliminary Examining Au, 
name or two-letter code of that A uthority may be 



# 

zirimcc 



^ or, iftwo or more Authorities are competent, 
Tcated by the applicant on the line below: 



PCT 

DEMAND 



CHAPTER II 



under Article 3 1 of the Patent Cooperation Treaty: 
The undersigned requests that the international application specified below be the subject of 
international preliminary examination according to the Patent Cooperation Treaty and 
hereby elects all eligible States (except where otherwise indicated). 



Identification of IPEA 


Date of receipt of DEMAND 


Box No. I IDENTIFICATION OF THE INTERNATIONAL APPLICATION 


Applicant's or agent's file reference 
P 1130 


International application No. 
PCT/IB98/01500 


International filing date (day/month/year) 

(28/09/98) 

28 . September 1998 


(Earliest) Priority date (day/month/year) 
(26/09/97) 

26 September 1997 



Title of invention ^etHOD FOR GENERATING AND VERIFYING DIGITAL WATERMARKS AND 
FOR EXCHANGING DATA CONTAINING DIGITAL WATERMARKS 



Box No. II APPLICANT(S) 



Name and address: (Family name followed bv given name; for a legal entity, fidl official designation. 
The address must incluck postal code and name of country.) 

Digital Copyright Technologies AG 
Stauf f acherstrasse 149 
CH-8004 Zurich 
Switzerland 



Telephone No.: 



Facsimile No.: 



Teleprinter No.: 



State (that is, coun/o'^ of nationality: 



CH 



State (that is, country) of residence: 



CH 



Name and address: (Famify namefolh^ied by given name; for a legal entity, Jidl official desig The ciddress must incktde postal code arid name of coimiry.) 



Herrigel Alexander 
Bergstrasse 62 
CH-8702 Meilen 
Switzerland 



State (that is, country) of nationality: de 



State (that is, country) of residence: qh 



Name and address: (Famify namejblhwed by given name; for a legcd entity, Jidl official designati The address must include postal code and name <f country.) 

O'Ruanaidh Joseph J,K. 
Studio 11 

Rue Jacques Dalphin 11, Carouge 

CH-1227 Geneva 

Switzerland 



Statcfthatis, coun/rK^ofnationality: 



State (that is, country) of residence: 



CH 



I X| Further applicants are indicated on a continuation sheet 



Fonn PCT/IPEA/401 (first sheet) (July 1998; reprint January 1999) 



See Notes to the demand form 



Sheet No. 



International application No. 
PCT/IB98/01500 



Continuation of Box No. II APPLICANT(S) 



If none of the following sub- boxes is used, this sheet should not be included in the demand. 



Name and address : (Family name followed by given name: for a legal entity, Jull official cksignation The address must include postal code and name of country,) 

Pun Thierry 

60, Chemin de la Gradelle 
CH-1224 Chene-Bougeries 
Switzerland 



State (that is. country) of nationality : 



FR 



State (that is, country) of residence: 



CH 



N am e an d address : (Family name folio wed by given name; for a legal entity, Jull official designation. The address must include postal code and name of country.) 



State (that is, country) of nationality : 



State (that is. country) of residence: 



N ame and ad d re SS : (Family name followed by given name; for a legal entity, Jitll official designation. The address must include postal code and name of country) 



StaXc(thatis, cow/zfry^ of nationality: 



State (that is. country) of residence: 



N ame and ad d ress : (Family name followed by given name; for a legal entity, Jull official designation. The address must include postal code and name of country.) 



State (that is, country) of nationality: 



State (that is, country) of residence: 



I I Further applicants are indicated on another continuation sheet. 



Form PCT/IPEA/401 (continuation sheet) (July 1998; reprint January 1999) 



See Notes to the demand form 



Sheet No. .3 . 



International application No. 
PCT/IB98/01500 



Name and address: ^^foilowed by given name; for a legal entity.JuH official designation. 
The address must include postal code and name of country.) 


Telephone No.: 
0041 1 


261 


54 


54 


E. Blum & Co. 
Vorderberg 11 
CH-8044 Zurich 










Facsimile No.: 
0041 1 


251 


67 


17 


Switzerland 












Teleprinter No.: 










816 559 









Box No. Ill AGENT OR COMMON REPRESENTATIVE; OR ADDRESS FOR CORRESPONDENCE 



The following person is |x | agent | | common representative 

and I X I has been appointed earlier and represents the applicant(s) also for international preliminary examination. 

I I is hereby appointed and any earlier appointment of (an) agent(s)/common representative is hereby revoked. 

I I is hereby ^pointed, specifically for the procedure before the International Preliminary Examining Authority, in addition to 
the agent(s)/common representative appointed earlier. 



□ Address for correspondence: Mark this check-box where no agent or conmion representative is/has been appointed and the 
space above is used instead to indicate a special address to which correspondence should be sent 



Box No. IV BASIS FOR INTERNATIONAL PRELIMINARY EXAMINATION 



Statement concerning amendments:* 

1 . The applicant wishes the international preliminaiy examination to start on the basis of: 
I X I the international application as originally filed 

the description | | as originally filed 

I I as amended under Article 34 

the claims | | as originally filed 

I I as amended under Article 19 (together with any accompanying statement) 
I I as amended under Article 34 

the drawings | | as originally filed 

I I as amended under Article 34 

2. I I The applicant wishes any amendment to the claims imder Article 19 to be considered as reversed. 
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Claims 

1. A method for generating and transmitting a 
data set between two parties H and B comprising the steps 
5 of 

a) providing a cover data set (CD) corre- 
sponding to the data set to be transmitted, 

b) generating a stego data set (SD) of said 
cover data set (CD) by embedding at least one digital wa- 

10 termark in said cover data set (CD) , wherein said water- 
mark is encoded using at least one key of an asymmetric 
cryptographic key pair (pspj/ vs^) of H, said key pair 
comprising a secret private key (ps^) and a known public 
key (vs^) derived therefrom, 

15 c) encrypting said stego data set (SD) using 

said key pair (ps^/ vs^) of H, 

d) transmitting said encrypted stego data set 
from said party H to said party B. 

20 2. The method of claim 1, wherein said step 

c) comprises 

generating a mask message (B| |SN), 
generating a signature (DSSMRq(psh/ B||SN)) 
of said mask message (B| |SN) using said secret private 
2 5 key (psj^) , and 

using said signature of said mask message for 
seeding an encryption algorithm for said stego data set 
(SD) . 

30 3 . The method of claim 2 wherein said signa- 

ture (DSSMR<3 (psH/ B| |SN)) of said mask message (B| |SN) 
is transmitted from H to B. 

4. The method of one of the claims 2 or 3 
35 wherein said encryption algorithm comprises the step of 
calculating the Fourier transform of said stego data set 
(SD) , modifying the phase components of the Fourier 
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transform using a pseudo- random pattern seeded by said 
signature (DSSMRg(PSh. B| | SN) ) of said mask message 
(B||SN) and calculating the inverse Fourier transform for 
generating the encrypted stego data set. 

5 

5. The method of one of the preceding claims 
wherein said key pair (psh/ vsh) of H is an elliptic 
curve key pair . 

10 6. The method of one of the preceding claims 

wherein said step b) further comprises the step of 
generating at least a first watermark, wherein said first 
watermark is encoded using said private key (ps^) of H. 

15 

7. The method of claim 6 wherein said first 
watermark is encoded using a hash value (crh(psH)) of 
said private key (psj^) and can be decoded by using said 
hash value {crh(psH) ) . 

20 

8. The method of claim 6 wherein said first 
watermark is encoded using a hash value (crh{OKDQ-Q) } of a 
signature (OADqy^) generated using said private key (psj^) . 

25 9. The method of one of the preceding claims 

wherein said step b) further comprises the step of gener- 
ating at least one second watermark, wherein said second 
watermark comprises a payload (pch[AM]) derived from the 
Fourier transform of said stego data (SD) . 

30 

10. The method of one of the preceding claims 
wherein said step b) comprises the steps of: 

i) providing a message (s^, ^2' • • • / Sj^) to 
be transmitted in said at least one watermark, said mes- 
35 sage consisting of a plurality of symbols. 
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ii) providing a pseudo random generator 
seeded with a seed value derived from at least one key of 
said key pair (psh^ vs^) of H or a hash value thereof, 

iii) encoding said message using values from 
5 said pseudo random generator 

iv) using the said encoded message (m) for 
embedding said watermark. 



11. The method of claim 10 wherein said step 
10 iii) comprises: 

for each of said symbols (si), generating a 
pseudo random sequence of numbers (v^, V2 / ...) by a said 
pseudo random generator, 

using the value of each said symbols (s^) for 
15 selecting a sub-sequence within said pseudo random se- 
quence for forming a symbol vector (rj^) , and 

adding said symbol vectors (r-i_) to generate 
said encoded message (m) . 



20 12. The method of claim 11 comprising the 

following steps for decoding said message: 

extracting a read-out message (m' ) from said 
watermark, said read-out message being a vector having 
the same length, if erased elements are replaced by zero, 
25 as said symbol vectors (r-i_) , 

generating all possible values of said symbol 
vectors (r^) using said pseudo random generator seeded 
with said seed, and 

calculating the cross-correlation between 
30 said pseudo random sequences of numbers (v^, V2 / ..-) and 
said read-out message (m' ) for retrieving said symbols 
(Si) . 

13. The method of claim 10 wherein said step 
35 iii) comprises: 

for each bit (bj ) of said symbol sequence 
(si, S2, . . . / sj^) , deriving pseudo random vectors (i^j*) 



• 
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having elements 1 or -1 from a said pseudo random genera- 
tor, which pseudo random generator preferably generates 
m-sequences or Gold codes, and 

depending on the value of said bit (bj), mul- 
5 tiplying said pseudo random vector (rj*) with +1 or -1 to 
generate a modified pseudo random vector, and adding said 
modified pseudo random vectors to generate an encoded 
message (m) . 



10 14. The method of claim 13 comprising the 

following steps for decoding said message: 

extracting a read-out message (m' ) from said 

watermark, 

deriving said pseudo random vectors (rj*) 
15 from said pseudo random generator seeded with a said 
seed, and 

calculating the cross correlation between 
each of said pseudo random vectors (rj*) and said read- 
out message (m' ) for retrieving the corresponding bit 
20 (i>j ) of the said symbol sequence (si, S2/ • . . / Sj^) . 

15. The method of one of the claims 10 - 14 
wherein the position of components to be modulated by 
each value of the encoded message (m) is given by a 
25 pseudo random generator seeded by a key known by both H 
and B. 



16. The method of one of the preceding claims 
comprising the step of encoding a message for being em- 
30 bedded in said watermark by using symbol based Reed Solo- 
mon codes as error control codes. 



17 . The method of one of the preceding claims 
wherein said step b) further comprises the step of calcu- 
35 lating a logarithm of said cover data set (CD) before em- 
bedding said watermark for embedding said watermark in a 
perceptually flat domain. 
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18. A method for generating a stego data set 
(SD) from a cover data set (CD) especially for step b) of 
one of the preceding claims, comprising the steps of: 
5 generating at least one message (IDcd) , 

digitally signing said message (ID^^)) using 
an asymmetric cryptographic key pair (p^/ vjj) and a sig- 
nature generating algorithm (DSSl^ER) with message recovery 
for generating a digital signature (OKDqd) , and 
10 generating said stego data set (SD) of said 

cover data set (CD) by generating at least one digital 
watermark, wherein said digital signature (OADqq) is used 
for deriving a seed for generating said watermark. 

15 19 . Method for generating and verifying a wa- 

termark in a cover data set (CD) representing a two- 
dimensional cover image, especially for step b) of one of 
the preceding claims, comprising the following steps for 
generating said watermark 

20 A) calculating the Fourier transform of at 

least part of cover data set (CD) for generating Fourier 
components of said cover image, and 

B) modulating at least part of said Fourier 
components using a template modulation pattern (T' ) , 

25 C) using the inverse Fourier transform for 

generating a stego data set (SD) , 

said method further comprising the following steps for 
verifying said wat earmark in a possibly scaled and/ or ro- 
tated version of said stego data set (SD) , 
30 D) calculating the Fourier transform of the 

possibly scaled and/or rotated version of said stego data 
set (SD) for generating Fourier components of said stego 
data set, 

E) calculating a log-polar or log-log trans- 
35 form of said Fourier components of said stego data set 
(SD) , and 
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F) calculating the cross correlation between 
a log-polar or log-log transform (T) of said modulation 
pattern (TM and said log-polar or log-log transform of 
said Fourier components of said stego data set for evalu- 
5 ating a scaling and/or rotation factor. 



20. The method of claim 19 wherein said step 
B) further comprises the steps of 

calculating a log-polar or log-log transform 
10 of said components of said cover data set for generating 
log-polar components , 

modulating said log polar components using a 
log-polar or log-log transform (T) of said modulation 
pattern (T' ) . 

15 

21. A method for verifying a watermark in a 
possibly rotated and/or scaled version of a two or three 
dimensional stego data set (SD) , comprising the steps of: 

A) calculating a Fourier transform of said 
20 stego data set (SD) , 

B) calculating a log-polar or a log-log 
transform of said Fourier transform of said stego data 
set , 

C) calculating the correlation between said 
25 log-polar or log-log transform and a template (T) , which 

template is the log-polar or log-log transformation of 
said watermark. 



22. The method of claim 21, wherein said step 
30 B) comprises the step of calculating the log-polar trans- 
form of said Fourier transform of said stego data set and 
said step C) comprises a step of detecting a rotation and 
either a uniform scaling suffered by said stego data set 
or a ratio between block size used in embedding and ex- 
35 traction of said watermark. 



• 



wo 99/17536 



PCT/IB98/01500 



58 



23. The method of claim 21, wherein said step 



B) comprises the step of calculating the log-log trans- 
form of said Fourier transform of said stego data set and 
said step C) comprises a step of detecting either a 
5 change in aspect ratio suffered by said stego data set or 
a change of aspect ratio between block sizes used in em- 
bedding and extraction of said watermark. 

24. The method of claim 21, wherein the pres- 
10 ence of said watermark is verified by means of a Bayesian 

approach to detect the presence of said watermark given a 
said key without decoding said watermark. 

25. The method of one of the claims 21-24, 
15 further comprising at least one of the following steps: 

i) pre- filtering said cover data by applying 
a windowing algorithm thereto, preferably Blackman, Han- 
ning or Welch windowing, and/or 



20 of the Fourier transform locally for filtering outliers 
and noise, and/or 



transform and carrying out said step B) for these local 
peaks only, preferably transforming only the coordinates 
25 of these local peaks, and preferably using the log-log or 
log-polar transform of said coordinates for calculating 
said correlation, 



Fourier transform before carrying out said step B) , 
3 0 and/ or. 



said step C) , using said scaling and/or rotation for ei- 
ther a) scaling and/or or rotating said Fourier trans- 
form, calculating a scaled and/or rotated log-log or log- 
35 polar transform therefrom and correlating said rotated 
log-log or log-polar transform with said template, or b) 
calculating a second template by scaling and/or rotating 



ii) calculating the variance or distribution 



iii) locating local peaks in said Fourier 



iv) excluding low frequency data from said 



v) detecting a scaling and/or rotation in 
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an original Fourier-space template and calculating a log- 
log and or log-polar transform therefrom and using said 
second template for calculation a second correlation with 
said log-log or log-polar transform of said stego data, 
5 and/ or 

vi) weighing low frequency components of said 
log-log or log-polar transform stronger that high fre- 
quency components while carrying out said correlation. 

26. A method for generating a stego data set 
(SD) from a cover data set (CD) especially for step b) of 
one of the claims 1-18, comprising the step of modulat- 
ing said cover data set (CD) using a given pattern, which 
pattern is calculated from a watermark using the follow- 
ing steps: 

A) providing said watermark, 

B) calculating a first inverse Fourier trans- 
form of said watermark, 

C) calculating an inverse log-log or log- 
polar transform of said watermark, and 

D) calculating said pattern from said inverse 
log-log or log-polar transform. 

27. The method of claim 26 further comprising 
25 the step of combining the magnitude components of said 

first inverse Fourier transform with the phases of a Fou- 
rier transform of said stego data (SD) to generate a fre- 
quency space pattern and, preferably, calculating a sec- 
ond inverse Fourier transform of said frequency space 
30 pattern. 

28. A method for verifying a watermark in a 
possibly rotated and/or scaled version of a two or three 
dimensional stego data set (SD) , preferably as generated 

35 in one of the claims 25 or 26, comprising the steps of: 

A) calculating a first Fourier transform of 
said stego data set (SD) , 



15 
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B) calculating a log-polar or a log-log 
transform of said Fourier transform of said stego data 
set, 

C) calculating a second Fourier transform of 
5 said log-polar or log-log transform and searching said 

watermark in said second Fourier transform. 



29. A method for generating a watermark in a 
cover data set (CD) representing a two or three dimen- 

10 sional data set, especially for step b) of one of the 
preceding claims, comprising the following steps: 

A) generating a template modulation pattern 
(T') using a random number generator seeded by a key (K) , 

B) calculating the Fourier transform of at 
15 least part of said cover data set (CD) for generating 

Fourier components of said cover data set, 

C) modulating at least part of said Fourier 
components using said template modulation pattern (T' ) , 

D) using the inverse Fourier transform for 
20 generating a stego-image. 

30. Method for generating a watermark in a 
cover data set (CD) representing a cover image especially 
for one of the preceding claims, characterized by the 

25 step of dividing said image into a plurality of blocks 
and by the following steps carried out for each block: 

i) calculating the Fourier transform of the 

block, 

ii) modulating at least part of the magnitude 
30 components of the Fourier transform of the block using a 

modulation pattern, which modulation pattern defines val- 
ues to be added/ subtracted to/ from said magnitude compo- 
nents, wherein for each magnitude component its corre- 
sponding phase component determines if said value is to 
3 5 be added or subtracted, and wherein the same modulation 
pattern is used for all blocks. 
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31. The method of claim 30 wherein said 
blocks are adjacent. 



32, The method of claim 30 wherein the said 
5 image is divided into a plurality of overlapping blocks 
and wherein the step i) comprises calculating the Lapped 
Orthogonal transform of each block to embed a Lapped Or- 
thogonal transform based watermark. 

10 33. The method of claim 30 wherein the said 

image is divided into a plurality of non-square blocks 
and wherein the step i) consists in padding each block 
with appropriate values (constant or symmetric extension) 
in order to obtain square blocks, calculating the Fou- 

15 rier transform of each obtained square block to embed 
Fourier transform based watermark. 



34. The method of claim 30 wherein the said 
image is divided into a plurality of non-square blocks 
20 and wherein said step i) comprises computing the arbi- 
trary length wavelet transform of each block to embed a 
wavelet transform based watermark. 



35. The method of one of the claims 30 - 34 
25 wherein the watermark is applied to all or some of the 
frames of a video. 



36. A method for generating a stego data set 

(SD) from a cover data set (CD) especially for step b) of 
30 one of the claims 1-18, by adding a watermark to said 

cover data set, wherein said cover data set comprises 

video data, comprising the steps of 

generating three dimensional spatio-temporal 

blocks of said video data and 
3 5 applying said watermark to each of said 

blocks, preferably by calculating a Fourier transform of 

each of said blocks. 
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37. A method for generating a stego data set 
(SD) from a cover data set (CD) especially according to 
one of the preceding claims, by adding a watermark to 

5 said cover data set comprising the steps of 

dividing said stego data sets into blocks, 
calculating a lapped orthogonal transform 
(LOT) of each of said blocks, and 

applying said watermark to said lapped or- 

0 thogonal transforms. 

38. The method of claim 37 further comprising 
the step of modulating selected components of said lapped 
orthogonal transform (LOT) as a function of a local image 

5 characteristics, such as the local image variance, 

39. Method for generating and transmitting a 
data set between two parties H and B, especially of one 
of the preceding claims, comprising the steps of 

0 providing a cover data set (CD) corresponding 

to the data set to be transmitted, 

generating a stego data set (SD) of said 

cover data set (CI) at a party H by generating at least 

one digital watermark in said cover data set (CD) , 
5 transmitting a hash value of said stego data 

set (SD) to a registration party (O) , and 

permanently storing certification data (CCD) 

at said registration party (O) , said certification data 

comprising said hash value of said stego data set (SI) , a 
0 digital time stamp (TVP) and information designating said 

party H. 

40. The method of claim 39 further comprising 
the steps of generating a digital signature of said cer- 

5 tification data (CCD) using an asymmetric cryptographic 
key pair (psQ^ vsq) of said registration party (O) , 
transmitting said certification data (CCD) and said digi- 
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tal signature to said party H, and verifying said digital 
signature at said party H by using a public key (vsq) of 
said key pair of said registration party. 

5 41 . A method for embedding a watermark in a 

cover data set for generating a stego data set, espe- 
cially of one of the preceding claims, comprising the. 
steps of 

calculating at least some magnitude Fourier 
10 components (MC) of said cover data set (CD) , 

applying an authentication function (AF) for 
generating a value (AM) derived from said Fourier compo- 
nents (MC) , 

ciphering said value (AM) using a secret key 
15 (pch) of an asymmetric key pair (pCh, vCh) for generating 
a ciphered message, and 

embedding said ciphered message as a payload 
in a public waterraark. 

20 42 . A method for verifying the originality of 

a possibly modified stego data set generated with the 
method of claim 41 comprising the step of reading said 
value (AM) by decoding said ciphered message using the 
public key of said key par and comparing said magnitude 

25 Fourier components to said stego data set. 
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(54) TiUe: METHOD FOR GENERATING AND VERIFYING DEGITAL WATERMARKS AND FOR EXCHANGING DATA 
CONTAINING DIGITAL WATERMAi^KS " * 



(57) Abstract ' \ 

A method for generating digital watermarks and for exchang- 
ing data containing such watermarks is described. It is based on a 
watermarking technique which is robust against image transformation 
techniques such as compression, rotation, translation, scaling and/or . 
change of proportion. It uses modulation of the magnitdite compo- 
nents in Fourier space and adds/reads a template in the log-polar 
or log-log transform of the magnitude components. The template is 
used for analyzing scaling and rotation or change of proportion. In 
addition, the system applies cryptographic protocols and public key 
techniques for both, encoding the watermark and transferring wa- 
termarked data. Preferably, an author (CH) encodes the watermark 
using an asymmetric cryptographic key pair provided by a public key 
infrastructure (PKI) and registers the watermarked data at a trusted 
registration party (CCC) before transmitting the data to a receiving 
party (B). The latter can use the public key ihfrastrucnire (I) for ver- 
ifying autorship. Data exchanged by the parties are encrypted using 
the cryptographic keys. In addition, image (video) originality verifi- 
cation is supported by the same asymmetric key pair as for content 
protection and for copyright protection. 
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Method for generating and verifying digital watermarks 
and for exchanging data containing digital wateanaarks 

5 Cross References to Related Applicai:ions 

This application claims the priority :of Euro- 
pean patent application 97810708.4, filed Sept .-26, 1997, 
the disclosure of which is incorporated herein by refer- 
10 ence in its entirety. 

Technical Field 

The present invention relates to methods' for 
15 generating and verifying digital wateirmarks . and for 

transmitting data containing digital, watermarks according 
to the preamble of the independent claims. ^ 



Background Art 



Digital, watermarking, is- a :method for marking 
data sets, such as images, sound or video/ A digital^^w^^ 
termark consists of a slight modification of the-data- set 
that does not affect the data set's usability but -that/ , 

25 can be detected usingf^ dedicated analysis^ software;^ or ap- ; 
paratus. Watermarking can e.g. be used for marking 
authorship or ownership of a data set,' It can als^^ 
plied for verifying the originality of the mult'atnedia 
data content, where the loss of originality refers td the 

30 degree of contents modification suffered by the image. 1 
Digital watermarking can be seen as a ^fu^^ 
mental -problem in digital communications (see eig^ I; 
Cox, J. Killian, T. Leighton, and T. Shamobn, . ^Sebure • 
spread spectrum communication for multimedia*:VProceiedings 

35' of the IEEE International Conference on Image Prbcessirig;- 
Lausapne, Switzerland, September 1996) Earlyr'methdds :6 
encoding watermarks consisted o£ no more thkh' increnient- 



30 



irig. an . image ;.conponent .tor. encode. a..'l^£tis^cm^^4'^J0^ ' 
menting.. to; encodie, av ^0.:^:(G.. Ca;ronni--^i^sj^^ 
Rights for Digital Images" in Hv ; H-. .'BrrU^tofe'r^^^^ 
Gerhardt-Haeckl, editors, Reliable;i IT' Sysfee^ 
5 Vieweg Publishing Conip^anyv.-GerTOany/>v,; 

(A. Z. Tirkel., G. ^ A. : Rankin/ R. G/'^visk^-SGhyi^ J.- r"' 

Hp , N , R. . A . Mee , i and . G . ^ F v. 0sbQrn^^^^^pie|j§^ 
mark" in Mcta-:93 , pages; >j5;66r:0%.^;l^^^a!|^^ 
Sydney, .'December 1993:) xand ..van. Schyridfei'l^v-etv^l^^ 

10 Tirkel,. R. G. van Schyndel, and C... E..^,i>sb6)rheS,v$'f^ 
dimensional digital watermark"., in ;AGCj^?;i,95^^^^ 
383 , University, of , Queens land%,.^Brilsbam^ 
1995) have applied ithe properties of ^^-seig^ 
duce obliyious watermarksv resistah4:^.;jt:p,|^^^ 

15 ping and reasonably robust. ;to. cr^lgt^^ 
tsui and Tanaka. (K, Matsufi. axid^r.: 
Steganography :,HoWi,to- 

'^.^y picture' 

• ihgs , pages.; 




2 5 ther.e -ha'a" .:l5e^n .ari;"'.;ilifeji:^e^ 

digital. :wa.t^e]rmarkingJ;/'I^ -v^-^-/^ 
tares , . such ; as -cryptographic,. :s!iizum^i^b^^ " " • ' 

borne, 

t r ansmi s s ion r 

by..the;_ . :'r?^.y,v^^'v :: 

mrskey ,r .. *^ModuOLatipn .and,.,,inf:qrnia%i^^ '''/.yil" 




Ross Anderson;, editor,- \Proceedings^-0^^ 



tional^WorKishbp . in . Inf qrmatipii^i 
. Computer:: Science,; -pages 307 



KBn^feejrn'ai- 

. .... — 



35 13 9 6 .;i.3$pr inger ): v--E;undaitie]n^ .'■>:.'£ 
to ^ reliable \ commiinication :h.a.%BpMB4imc^M'Q^^^^m 
authors ^ see, ; Smith and Cpnviske^^l^cg^^^l^^^^^^^pl^^ 
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payload of a watermark, the better are the chances of it 
being communicated reliably. Spread spec trum,;is an exam- 
ple of a symmetric key cryptosystem (B. = Schneier, Ap- 
plied Cryptography", Wiley, 2nd edition, 1995) . System. 
5 security is based on proprietary knowledge/ of . the keys,- 
(or pseudo random seeds) which are required, to -embed, . ex- 
tract or remove em image watermark, Oni.,. provision in. the 
use of a spread spectrum system is that it is impcprtant 
that the watermarking be non- invert ible because only -in 

10 this way can true ownership of the copyright: material' be 
resolved (S. Graver, N. Memon, B. Yeo, and M. ^Yeuhg, /*Can 
invisible marks resolve rightful ownership's .?"-,, 
IS&T/SPIE Electronic Imaging '97 : "Storage aiid Retrieval 
of Image and Video Databases", 1997). 6 Ruanaidhv et al. 

15 {J. K. 6 Ruanaidh, W. J. Dowling, and F.-M. Boland, 

''Phase watermarking of images", IEEE International Con- 
ference on Image Processing, Lausanne,' Switzerland, Sep- 
tember 1996) and Cox et al. (see above) have developed, 
perceptually adaptive trans forfti domain methods .for water- 

20 marking ; In contrast to previous, approaches -listed' above . - 
the emphasis 'was on embedding the water;mark in , the, most 
significant componeritis 6f an image or a ' video .frame>,...T^ 
general approach used in these. papers is to -divide -.the . 
image -into blocks, Each ;block is mapped into the , trans - 

25 form domain using eitiaer the Discrete Cosine- Transfp 
(W. B. Pennebaker and J. L. Mitchell, MPEG.Still; I 
Compression Stauidard" , Van Nostrand Reinhold,w!New:;if^rk 
1993), the Hadamard Transform (W. G. Chandlers; ,JBasiGs of 
Communications and Coding", Oxford' Science I^iblications . 

30 Clarendon Press Oxford, 1985) or the Daubechies. Gavelet 
Transform (W.H. Press, S.A. Teukolsky, W.T.'.Vetterling, 
and B.P. Flannery, "Numerical Recipes in C" ; Cantor idge 
University Press, second edition, 1992) . .Tliec'phase^coit^o- 
nent of the image or video frame is then modified accprd- 
35 Ing to the pseudo-random sequence. containing.uthe;v^,v?ate 
marking information. 
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- Information can be- emliedi^ 
* J. * K. 6 'Ruahaidh/. -W. > Jx-Dowlingv^^ah^ • ' 

termarking digital; images :forjcppyright:;p^ i 
Proceedings 'on Visioh;,> Imaige and;l5ighal^^^iBrc^^ 
5 143 (4 ) ■ : 250-256 August :199;6>'^'bas;edv'oriMthe^^ 
same title at the IEEE- Confer enc'e5id^| Image 

Its Applications , - Edinburgh,^ .Jul4^;*^^S^^ , ' 

and phase. Wavelets (see^/refs .''?6&^Rita^ 

Boland, -above) , . >Lin:ea#^rPriedit:tiv^ . ; 

0 al . , above) and . fractals ■ ( P . ,vl3av^ii^'?andJM 

tal- based image- stegandgraphy'^> %iSi^R<^s^ : 
Proceedings-^ of' the -First -Ir^t^^rhs^d^c^^ -Vfofekishop^^ 
mat ion Hiding , -Lecture -Mb t ei^ rini '^ompfiiit/erf ■ ^ i: ■ 

279-294vV Cambridge,' UK, MaS^/ijurife4?a^$^^ 

5 ■ ; The key- to - makihgi waterfeaa?^^ 

the^ recognition "tha^fe^-ih nord^k^^b^^a^iM^iftt^i^ll 

components 

- ;and Bpland>:-;ahdv>^ ref -''6f 'aji'^epy^Jl^'-S^^^^^^M^ 
0 and^ T. Shsunc^n ^atbovie) ^Obj e'ctiii^yeSgi^ 





purely-bn -energy content- (^see rets^^c^f^^^ 
Cox^^^t '=al . 'above)' ,- ^totr s^tatisj^i^cct3i4lt^ 
5 -.method-fbr -signat\li»^ficafs;€:ihg^ 

Ings o£'^^-^^-^— -^-^-^-^^--^-^ ^2ti-iaii4:^iii»IS;^ 

essing> 

chovisual (sefe-^ JvF .v^D^iiaiglb'^^Gn^ 
Macq; 
0 Electronic^ 



■ Ings ■ -of • thfe' - IEEE- - In:tiernat:d;b3iaaSi.iGi^^ 
" .messing r^'- Lausanne; ^^Switiera^aii^ 
' " ' ''^l^®' i'^^^s trial iitpor;taji^ 

marking has resulted in a nximber o£ ^?rod^^ 
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ket, either based on spread spectrum techniques or addi- 
tional registration services. They include the Picture- 
marc system by Digimarc (RHOADS, B. Geoffrey, Digimarc 
Corp (US), "Steganography Systems, WO 96/36163. A/ Sure- 
5 Sign (former FBI's Fingerprint) by HighWater Sii&num (WO 
96/27259), IP2 system by Intellectual .{i>rotocols, the Ar- 
gent system by Digital Information Commpditie's Exchange, 
the PixelTag system by the MIT Media Lab, the SysCop sys- 
tem from Zhao and Koch by the Frauenhof er-Institut fttr 

10 Graphische Datenverarbeitung (J. Zhao ; and E. Koch, Em- 
bedding robust labels into images for copyright^ protec- 
tion" , Proceedings of the International Congress 611 In- 
tellectual Property Rights . For Speicialized Infbrmatioh; 
Knowledge and New Technology, August 1995 J.'rZhab/ ' "A 'WWW 

15 Service To Embed And Prove Digital Copyright Watermarks" , ^ ^ 
Proc, Of the European Conference on -Multimedia^ A^ 
tion. Services and Techniques, vol. 2; Louvain^La-^Neuve, 
' Belgium, May 1996) , and the Tigerma:rk system 4rom7N^ 

(European patent Application EP 766468A, NippdhrElectric 

20 Corporation (NEC) , April 1997) • ^ - ■ 

THe apg>roaeh proposed by Digimarc - (see WO- 
96/3 6163) adds or siflDtracts small randoih quanta 
each pixel according to the least significantibit of each 
pixel compared with the^^binary mask. The originality of . 

25 their approach cons i§ts in the use of subliminal- digital 
graticules' -that will help in recovering a rotatibn R ^and 
a scaling S p>erformed on the marked im^ge. They use an 
exhaustive search strategy based on these graticules 1 6 
recover R and S. This stands in contrast to the- tCTtplate 

30 embodiment described here, where the use of r log-polar ■or/;;! 
log-log mapping of the Fourier transform of :the imaLge'- 
combined with cross -correlation in the log-polar or ibg- 
log plane avoid such a search. / 

The Highwatei* approach (WO .96/27259)-de^c2fibe 

35 a permutation technique to modify the vialues of the'data 
elements according to certain rules which depend oh the 
message. --^.'-.p;-' 
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The^approach : of: Zhap; ahd> Ko5||% ^jS^^^ - 
JPEG -image compress ion.:.algorit]pi,:v^pr<^ 
the image into individual : '8;-x biocl^^::.^-^^ 
ficients occupying particular. posit£ons;.4rvife^^ 
5 block of DCT; coefficients can,;be;;-markedv-v^hes;^0oi^ 

the low frequency components.: of. :t^^image,jDfG^ ! 
elude- the .mean value' coefficient: ^^s|\iy^^l3^:;a^^^ 
quencieis,. Three of "the .remaining ;;|S']^.|g<?e||d^^ 
lected^ using- a pseudov irandom vnuml:^ 
10 information . The r es^lance. :of ; gh^ 
quency hop spread spectrum .^coitimu^^ 

tioned and ^the blocks v axe^ placed^'at^r^^G^ - 
the image. A WWW^ registrationr^^seryv^ 
. for a local registration and' a^l^yiywat^lt^ 
15 server regist:r;ation and a server|wa^$iic^^ 

■■local ^watennarking., and - a^. seryer;;vi^giiB|^^^ v 
proach vis based.- on a trusted .t:hi^0^ 
server : and Watermark ^Embedding} 



20 




2S' 



— .process ^ & 
trus tedt third 
• . Holder. :/andi>infririg^: ^hisscopyriglvt^:-^^ 
. f orr4he^t.;,,embedc^ ^^^V^^^J^^i^^ 
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tem' and^^the^ srhj:tp:;protocolv 
tions; ;€u::;eCaE4)lied'^^ 

verificati^on^^procediare siipj^^rj^^wi^ 



cation^ of ; ^the seed^ , applied^ :f orr,^^ 
termark,., by ^independent pai^ies;,^?^;^^ 
The :S^ht.tp-: protocol (SSL. se^curiLt^^^ 
the protocol presented below . .in 
ple^; the non^repudiatipnr secxizd^^^^^^gV?^^ 



3 5 : ported by the/srhttp 

. : .embedding; .of , the, . mark ; are^^f urtherino3|^^ 
the SysCop system. For ^ copyright veri:i%^^^^^^|^^^ 
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right Holder has. to disclose his. key. The information 
generated by the trusted third party is based on. the. 
cover data, but not on the stego data. 

I. Cox et al from NEC (see EP 766 468, above) 
5 propose to insert watermark into the perceptually, sig- 
nificant components of a decomposition;^;of the data in a 
manner so as to be visually imperceptible. In contrast to 
the method described here, .they need the original data 
which is compared to the watermarked data to obtain an 
10 extracted watermark. 

J.-F. Delaigle at al. ( J. -F ..,Delaigle,. J. -M. 
Boucqueau, J.-J. Quisguater and B. Macq, .".DigitaL;.: Images 
protection techniques in a broadcast f raimework: Anr over- 
view" , Proceedings of the European Conference: on Multime- 
15 dia applications, Services and Techniques vol,;.i 2 > -Lou- 
vain-La-Neuve, Belgium, May 1996, J..^-F . DelMgle,.^^^^^^ 
Vleeschouwer & B. Macq, Digital Waterrtiarking^;/;: .Srpceedr 
ings of the SPIE, vol. 2659, 1 February; i996;)i^have^^^ 
plied signature labeling iechiliqu)es for the/ copyrigh^^^ - 
20 protection of >^idigital images. The approach presented, ds 
-very similar a EDI security standards:. ^-The labeling- does 
not influence the multimedia data.. Their approach is i./ 
based on an enhanced image format and generates /a: digital 
signature label in front of the image. This: :.signaturevla- 
25 bei can be easily overwritten or destroyed. .:Thetfegistra-; 
tion entity-' supports no secure on-line commuiiicatidn.:pro- 
tocol and is constrained by a legal trusteed zthird.jtparty: 
In addition, no means are provided to resolve ; a tdonfllct 
if multiple watermarks have been embedded in y^the- same im- 
30 age. In an enhanced architecture they propose :;a general ; 
watermarking function which uses the output vbf; a,; hash ; 
f met ion as the payload of the watermark. .This iwateinnark 
function does not support third party verification and is 
not based on a spread spectrum technique, lln addition, 
35 * different types of watermarks are not 'Suppbrted:>:The\^ 
masking scheme presented depend on a ciphering^; function 
for the inscription. In contrast to the approach .pre- 



sented in .this .disclosure,. tUe,. secret; key]; h^^^^ 
vealed f or. copyright ;Verifica,tipiiT^ar^ nq^iCod^n^d^c^ 
along with crypt ogre4>hic; digital. ,^i^ia.t\xr^s 
In addition, :the: cryptographic key^^aippliec^^^ 
5 for ciphering and not for other,=. funct 

vant for copyright protection ras deMrnedvln^ 
sure. ■ . - ^■^'1:V.^"-^■^■'-;f;:ek:^^■/v^ 

S. Matyas at all {Btei^>ii^ 
B., Johnson, -An V.v.:Lee,^iaostisaaw..Pr^ *> 
10 tin, William S.. Rohland,- and John ;D:;-.:Wi>3J^^ 
419 A", Stephen .M^ .Matyas, iDohald^ififif;^!?^ 
Rostislaw;.Pryinak>^'. William . C /^.-Mart^rt^^f^ 
and John D. * Wilkins,^EE o : 539.*.'?^i5 
system which. is. -leased on^:an;:architept^^ 
15. ent - entities, . namely the •dat.a.^porc^esysq^^ . 
graphic system: and the networfe-Ci^ftiM^ 
overall, system security 4ependS; or^^^h 
. graphior^key^scheme- and digi^aliv^ci^r.^^iGa^ 
erated: Af or . -ay.ispeci f i G-..,:da.ta ^ ::Sfet^;y:C&3^ ^c totigj^pe^^ ' y 
20 .These - cdntr(3^h.>^eGtprs -s'et. up;^-^^.l;^s^ . 
■ .^'-^cGiss;..ri^ts^;0^ 
init:iatedv:ldr^e' -r^^ 
^ ■ enforcements :of>:e^^dedicajied 

on- a.; hierarchical ^.rcil^- modeivi :^^hiB^|||i^^M^^^|^^ 
25 . ,hardwa;re^i)asedv,seci3r 

. and. asymmetric cryptc^aphacii^keys^^^ 
toeols-:yapE>lied :are: 'diff^ren-tv ■tp^feh-ep^ 
in this .disclosure . : The remphasi^ ii^^ 

; f or controiHng/ .thefciise;:=of vpi^iya^ ; 
30 is not^ the..:^purpose["^of .our;:;^sys|:,em5^i;t■]^ 

needs several dif f epent :^types,j^pf : > . 

, asymmetric):-, in .^teontrast . .to;^our ' aM^f 
. . one- entity ;-one-asYmnietriG^Jcey:rpai^^ 
,Tanaka,'.et- ;al,i -^(^.^/Tan^^ 
^3 5^ .Digital^ Signature ;i scheme ■on-s^;^po5^^ ; 
Transmission'! .,..;ElectronicS;:&UGoi!^^ 

Part.;I - . Communications^v Vplx;^ 74^, No^^ ■ 
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propose a digital signature scheme for watermarking- fac- 
simile documents (binary images) . This scheme ^modify the 
length of certain runs of data with a single bit of the 
signature data. 

5 

Disclosure of the Invention 

It is an object of the present invention to 

10 provide a system of the type mentioned above - that pro- 
vides a simple and secure way of generating and transmit- 
ting watermarked data. This object is achieved^ by the ■ 
methods described in the claims. 

In one aspect of the invention, this object 

15 is achieved by an integrated solution method f of '-gerierat- - 
ing and transmitting a data set between two parties H-a^ 
B comprising the steps of a.) providing .a cover data -set 
corresponding to the data set to be transmitted, " b;)^geh- 
erating a stego data set of said^ cover data -set by - - ^ 

20 embedding at l;east one digital waterinark in - 4aid cover - 
data set, wiiferein ^said watermark is:' eiaGbded^^^usirig -'at - --'^ 
least one key of an^ asymmetric cryptographic key :pa^ 
H, said key pair comprising a secret private v kety arid--^^a^^^ 
known' public key dierived therefrom, and c)- encrypt irig ^ 

25 said stego data set ^'ing said key pair of " H;^ d) trans- - 
mitting said encrypted stego data set from said party' H 
to said party B. 

The party creating the watermark csbi 'embed a 
detection, a private and a public watermark in the data 

30 set, wherein the detection or the private, watermark iis 
derived from the private key, the public watermark^ f rom 
the public key. The public watermark can be detected by 
third parties while the private watermark can . only be de- 
tected using private information. Preferably, -the'd^tec- 
35 ^tipn or private watennark is not derived from ^the>privkte^ 
key directly but from a hash value of the same^' fimd/b^^ 
from a signature generated with the same,- siich that- - the . 
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15 



20 



25 



author- of ,the .waterxnarkv does^ npt^li^ 

vate key; i f ;the- private, ^waterinar^ . 

In - cino ther aspect:- of the . irivehtibhr/ 1 tiie^ cover 
data set is provided with a: digital ;.wcitermarl<^^^^^^ 
stego data then securely transmitted to -a. rec^^ 
party that permanently stores, at leSst timeiin^oin^ 



origin of the stego data^-se^,. ahd^.a'^i^ 
certificate. - ■ • . ; ' ^ \ ^^'^V>";x-i 

In another aspect of , ^^tJie^iriA^ - 
plate modulation pattern is.;addedifto^tfh^]^^ 
form of an .image ,that. ls..to,;be^$pgQy^ 
For checking' the. watermark,^ cthe-.Fouri^2^;:^rknsSorin^^ 
stego-image is calculated; From^.;thi,Sv ■ 
the log-polar mapping . transf orm^^^si^g^i^ 

then .searched 'for the modulation -pa^te^ lo^^/--^V 
polar.. transform of the. Fouri!eE>,;t:2^u^|ip^ ■ 
tage .that scaling: andv,rotatioii..pf|t^,^^^ ' 




Howfeyer y 



s^r^oiiij^iSiSdS^ . ; 




30 



35* 



plate^modula^xpn.,pattern^ 
log'4:rahsfprm-^pB^-^ 

lbg:^polar — ■■ -=-1^1.^^^^-*.:^'^;;^^^ ^i,.i^:4-.wi...- 

horizontal^ 

and, cross-rcprrelation technigues,^c 
the;,;templatf ... , . ... ,'. -vcv^.^^;^^'|g^|{>^ 

.in. stilV,another^^sp^ 
image. , to. be,:^aterinar^ed.Ase^ 

magnitude ,.CGit^ohent&^ of: ^the. jpp^^ r 
block . is^'-modulated-' usihg^-thei-Hsam 
provide&-.,.robusitnes;s,,-agaa^ 

■ becausei- a chopping. -leads^v^tOj^a.piil^ [■. ^oi- : i' 

^aph ^lock....Prefer£jDl . 
-Fourier, trjansform-rare^mp^ 



modulation i should ^be ^ der:iv;ed|vf f 
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thereby reducing interference between the image data- and 
the watetTTiark as explained in the following disclosure. 

In a further aspect, the invention consists 
of a method for generating and transmitting a data set" 
5 between two parties H and B comprising the steps* of pro- 
viding a cover data set corresponding the data set to 
be transmitted, generating a stego data ^et of said cover 
data set at a party H by generating at least one digital 
watermark in said cover data set, transmitting a has 
10 value of said stego data set to a registration party, and 
permanently storing certification data at-said registra- 
tion party, said certification data comprising-said hash 
value of said stego data set, a digital time stamp- - arid 
information designating said party H. 
15 In a further aspect, the invention -^relates -to 

a method for generating a stego data, set from a coyer - 
data set by adding a watermark to said cover data- set ^ 
comprising the steps of dividing said stegc data sets 
into blocks, calculating a lapped orthogonal transform' of 
20 each'of said blocks, and applying .said watermaxk to said 
lapped orthogdnal transforms. , ' 

In another aspect, the inyention relates- to a 
method for generating a watermark in a cover data set- 
(CD) representing a two or three dimensional data: set; ' ' _ 
25 especially for step bT^bf one of the preceding claims, 
comprising the following steps: A) generating a template 
modulation pattern (T' ) using a random number generator 
seeded by a key (K) , B) calculating the Fourier transform 
of at least part of said cover data set - (CD)^ f orvgeherat- 
30 ing Fourier components of said cover data-set, C) modu-^ 
lating at least part of said Fourier components using * 
said template modulation pattern (T' ), D) using: the in- 
verse Fourier transform for generating a. stego-image • 

The invention further relates to : a method ^^f or 
35 verifying a watermark in a possibly rotated ' and/or scaled 
version of a two or three dimensional stego data set, ' ^ 
comprising the steps of: A) calculating a Fourier trans- 
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form of said stego. data set ^Ji^SDh^ uB):^jceilc\^ia%2h^ 
polar or a log-log transform- -of: /saidrFoiiri^ 
said stego data set, , and C): calcul=atiiig .thel^cprre 
between said log-polar or log-log,^vtrariS:f oapizv^ 
5 plate . (T) , which templatev is :they<log-polar::<ot-^^ 
transformation of said^ watermarkj-V.^^^.^ . v.. :>;[2^cv^ > 

' Brief r Desjcriptlono .Qf : t'he;::DraWi^ \ ; 

10 ^ . • - ^ : ; V'"V-v.j^>::;' f^r- fei^'^'t --^^^ 

The invention willthe:?bet^er;=jAindfer^^ 
ob j ec ts other than those ■ set,. ?f ortii^ ;aboW>.wd/^ .#^c6mei^:ap|^ 
parent -when consideration is. .gi^^em^to:r^the^^f oil^ 
tailed description thereof '^Sxich-ide^isieripti^^ 
15 I ence .-to-, 'the. annexed drawings:^:twh|erei:n^: y 'v- H^f^^ 

. . Fig. 1 , thef ;parties ■ - 

termark: protection,^ .-r,- ^^^v^-c '■/;J^/■^,V; 

;■,•^ . vFigv 2 then: par.ti^s.'^;;djiyG?i 
. tectipn vusing;vr^egister<^^ ici^ ■■^^■yr^ ■- 

20 . .vFig^;-3'-the .;part^es:4iii^^ved:>>^^ 

,..-^tection . ui^ing r§g;ist;^r<ed cryp^Q^apJil^ ■ kte^sc^aridMi: ifegi^^ ; > • 
tration^ party, .) ■'''r :y,^':;:M^^0-:^^^^^ 

• Fig;..;4:the :s.teps^ taken. :|pr:?einb»0 

.mark<^- • ■-. ;-*' f--'',- ---^ : -iop.; 

25 •■'Fig..v::5^he^.s:teps;v^ 

h ; Fig.;::^6'y•the^^st:eps.v•":for|?^^ 
. 'Fig. 7 tiheirsteps^for^'-'re^an^A^^^^ 

Figv 3/ the;^ s;tep^:^;for/,eit|l)^ai^ 
rotation-,., -scale- and^' trans la§ioh tim^^ai^ 
•30 . ... , :^Figv;9'. the -steps^^-forv.eiinb^ 

-in an^. Image.- avoiding r .tO:.7map Vthe.> priginaA^in^^^ '-^C- ^- ^ X- 

rotation, ^ scale;;and^ translatibn ;ihya^a5bt^ 

- ;--.v,;;; -Fig. ;10-../ thers'teps- to^'extxac:t;|t;ilie^^ ' - . ; -/.^ 

from the image, ^: , " '.^^ " 

^35-, y-:-,:- ^ X ■ Figw.rll::. the/ tiling;^ o:fij.t;lifes^^^ ^y^^'^' 
stego^rimage: orv, stego^. video.-, f •ramev:t:r^dt* r:i:^'^:':''^:^f§.::m:^.h^ • . 
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Fig. 12 the tiling of the watermark in a 
cropped stego-image or cropped stego video frame., ■ 



Modes for Carrying Out the Invehtibn ' 
I. Terms and Symbols: 

Before describing a preferred miethod and ap- 
paratus according to the invention, some key terms and 

10 symbols used in its description are explained' in the fol- * 
lowing: * . ; 

Image " : An image in either digital or' physi- 
cal form which may constitute a still image or- a -video' 
frame. It can also refer other types of data; such as'- 

15 video and sound, in particular when being used- within the- 
context of the protection and owner authentication meth- 
ods of section II of the disclosure." 

■ ■ ''Signal": A signal in either ^digital or - • 

physical form. It may refer to one dimensional' or miilti- , 

20 dimensional si^gnals such as image^, and video. ^ 

'^' Copyright: Holder (CH) ^ : A party ■ ( or- a ;'pf6c- 
ess acting on behalf of' it) ''owning", a .'(digital ,; image or 
video . This is the party that generates th6 -watermarks . ' 

Buyer (B) " f A party (or a process - acting ^'on. 

25 behalf it) which obt^hs (e.g. ,by purchase) .via elec- 
tronic means a specific image from the'CH. • 

Stego " : Implies that an image or'/'yideo data 
is marked. The stego image is also referred to as the' 
stego data set (e.g. stego image or video frame) ' 

30 Cover " : Implies that an image.br , data iis un-^ "' 

marked. The cover image is also referrefd to , as the cover 
data set (e.g. cover image or video frame) . - ^ >> -^^^^ 

^Watermark'' : The form the IAD -takes^ when it 
is in a form suitable for embedding in. a:. signal . " - '^^^ 

35 * ; ^ '^ Copyright Certif icate Center (GCC)' * :^ An or- ^^^^^ 

ganization (or a process which acts on beharf of ■ itT' ^ 
which registers copyright ownership for a specif ic image- 
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or video. Successful regis Crat::ion\. is ^ioM^i^^ a ' ; 

sender verification -procedure-: ■Afkeii^^ja(:ei^0£& 
tion a digital copyright' certif icate;%anc;be;'g§'ilfe^^ 
The CCC does not act as trus ted ■ third-rpaigt^ 



tem 



15 



" Digital copyriahj-,"Cei;-t^iigat:!g <f '::M 
copyright data which comprise this. c6t>ia:tg;ht,.cWtif ■ ; 

data .and. a digital .signature. . . ;V ■-.'■([.iii^ '■" ■^ ■ ■^r 

/'^ Copyright-^Recmest ■Data;vj(x:fUD;)a r;:bgC:(^^ ' V . v 

10 data which. ^contains the -ste!go>-iiriag^iihef^if^^ 
cover-image, a Universal Copyright ^Gorii^eii&i^i^^ 
Copyright Symbol,. ,.,the.,^tenn--;'' '^Sopyri^l^gllftiiij^l^^ 
copyright,.. the^-name of, the /copyriight;^<3^ 
.phrase /.i All _,RightS;-.keserved:: ! 

"Copyrigh t iGerti£aigatfe^aifca;;^(ie]^S j^^ ■ '.V. 

data ■ which contains relevalnt cek^^^^^^M^^^i&tii^ "'\ '■' 7]-y-'[ 

■■ ■ "Digital ^s iqrtature ' ;-7.^A■'^^€a;^;sjt^H^B|^^ 
-been 'genei^ated by>a ;cryptographic6a^i^ "^5'^: 7[;. 

eration:>.traiisfprii^ai^ - * ^'^^w^^i^v^y^llj^r;^^ '■ -'yX 

■ ■ ■ -•^j^gfetal :.::;sigBtatuke^g^ 'i.'y'^^.:',';. - 

■ ,.;£ion'': A •m^hod;';£pr-.ctc)iu^^ 

■ • ;• "Pigit^l,rsaiqnat ureiA/sl^f 
• tion?:. A.-ym6t-hpd toT-ve:eLi^/iJalg;■ji^^ 

is ■ autJientic pj: nb;t:-t 'f.'"- r ■ ■ '■:i?v'-::;.'^i-'V^^ 

^".Digg tSir si^ature -.-seheife ^A^^M&MM;m^A^J^-'.--m^^^ 'M 
on asymmetj?ic;.crypto^r2^hiCi;.;t.eG^^ 

.trans for;matipnv. is ^usjed for the.i;di^i't^i^sii^pti^/gheher^ 
tion and 'whose ;Rublicrti:ansfomatibr^^ 

digital .s,ignature vex;if icatiTonc^; ^a■.\^^^%|/^yf^^^;■^|*^ -^'M'^ 

■ - ■;" Digijia l. .s ignafcugeVkcli^eaMMiim;^^ ' '% 1^:4 
er:^'.'. .A, digital -signature -schemee|ii;^i^fcS U;^-^ - 



20 



30 




, " Digital : signature vsdiiiBifi^^.tfeappa^d3!ife ^ J.' V ' ' • ; 
35 -digital signature.. scheme •for.'.v^cl^^ 
quired as. input, to the :digitarl ^ignatoe 
transformation. -. .••-:-Vv..^^V'A«»4^fe^B?^ 
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Asymmetric key pair ^^ : A pair- of related 
cryptographic keys where the, private key defines the. pri- 
vate transformation and the public key defines . the. public 
transformation. 
5 '^ Symmetric key : A cryptographic, key, used 

with a symmetric cryptographic technique .and -known only " ' 
to a set of specified entities. % 

" Public Key Infrastructure (PKI) ": An> organi- 
zation (or processes which acts on behalf of /it) which 
10 offers services for the generation, registration; . certi- 
fication, distribution, validation, . and r.^vocation . of ' a 
certificate associated with an asymmetric key pair. 

'^ Public watermark " : A watermark . that, can be 
detected using a publicly available key (or a hash value 
15 thereof) . 

'^ Private watermark " : A watermark that, can 
only be detected using a secret key (or a hash value 
thereof) and some data associated to specific cover data. 
It is not possible for an unauthorized third, party to :. . 
20 overwrite or delete the private watermark without the 
cryptographic' secret keying inf drmatidn,:. 

'' Detection watermark " : A watermark that can 
only be detected using a secret key (or a hash Value 
thereof.).. It is not possible for an unauthorized third. ' 
25 party to overwrite or'>^ele'te the private watermark with- 
out the cryptographic secret keying information:;- 

'^ Payload '' : The core of the hidden IAD in bit 
form without error control coding applied. 

'' Image ID " : The following format scheme' for a 
30 globally unique ID: The first 3 bytes detemine' the CCC, 
the following 3 bytes determine the CH ID defined by the 
CCC. Finally the CH can freely assign last 4 bytes for 
each one of his digital images or videos. / * 

'^ Oblivious ^ • ^ watermarking . technique "whibh 
35' does not require the cover- image for extracting: the: mark. : . 
In other words, only the stego-image is required to exT 
tract the mark when using an oblivious marking scheme. 
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." Template ^ : A^^hidden^message /e^ in the. 

image . Two kind of templates - are >usedr...^;RST;^teir^g^ 
tat ion-Scale. Template) " 'and^?£iT.:t^pl:ate^f-^(f^ 
Scale Template) . By detecting the RST ternp^^^ 
5 ing . (zooming) -arid rotation .suff ered^by ^a;:^teg^>>rima^e cari^ 
be determined. By detecting the ^RS^^eir^la;t^::;^tbe h<Sri^r ": ■ 
zontal and the vertical scalirig^^a:i'e^:det6G^ th^re-^ ■ 

fore the change of proportion'^ siifffei^ie^ 

can 'be . determined, . v.. : ., ^; 'j^^ik^:-: :^o/z-\k_ ' 

10 . . ' ^Pseudo ■rand6m> ^seed '^:J/:A .^valiLii^^ V;^ f 

tialize a psfeudo .randohi n^iimber\gen^rat:6^^^ *> 

"ModiU^tionr : Ghkngi^ 
e.g. by addition or multiplic^tlbn; . V^v ^ • ' . ;^ > 

15 Symbols: , ,'.?^:v'-;:*/^:i'^ 



^" ^ . - . - - '•:..v...jr\.?i4-.,s:i^^ ■ ■ 

jD^stingiiish^d . (^unique);; JiaA 

20 _ Hoidter, ;;:the .Copyright, Qert^iM 

B and-''the-. Pufeliic/^Key infirasSi&ture^^ .■ • ^ ' 

_Cert.fi., _Cert C /yjC^^^'B ^'^ 

Entity- H's public key..,,cer:tifa^cate^^frGm^^^ 



25 



^ ^ C',s public. My^certif icate. -irbni^^^ ' 

; public. key-:^rtifacate, f ^ix^^^J' 'Ih^ 

The asymmetric signature ,and;y\^eri>f^^^^ pair 
of an entity /with the di.s,t£rigui!sKed;;;hMn^ 



30 



(PCX , vcx ), . . ^ , . • : ' 

.The asymmetric deciphermentnfiand.riencic^feer^ 
pair of an entity with . the dis>tin^uiisiie(#^ 

; . A copyright^ -certifiqat^ .^ ..;,.3^u:k^,fi'^m^ ) : " 

recovery, where X denote s^the^p^ 
input .data,; and .Z the>.reS;Ul^tin^f^^^ 

DSSMRv(.x,Y,z) „ ' -y^,-::^:^-^ 



il . „■ .. .■ 

. PCT/iB!Sl8/01500 

17 

A signature verification scheme with message recov- . 
ery, where X denotes the public key, Y the input 
data, and Z the resulting output 'data. 
DSSAPg(X,Y,Z) 

5 A digital signature generation scheme withappen- ; 

dix, where X denotes the privat^ key, Y the input 
data, and Z the resulting signature 
DSSAPv(X, Y, Z) 

A signature verification scheme 'with' appendix, 
10 where X denotes the public key, *Y the input data,. ' 

and Z the resulting output- data. - : 

crh A collision resistant hash function ' V' ;^^ 
OWEA(X,Y,CD, SD) ' 

The oblivious, spread spectrum based- watermark em-, 
15 bedding algorithm with the seed X, the pay load" Y, 

the cover data CD, and the resulting^ stego data SD. 
OWVA(X,SD,Y) ' ^, . 

The oblivious, spread spectrum based watermark 
verification algorithm with the seed X, '_the- stego 
20 ' ^ data. _ SD% arid the resultingi payload Y) >■ 

Time variant parameter, such; as .a sequence niimber 
or a time stamp. ' -v^ 

rpmg(x;y) . • . --.^ 

25 A random phase mask generator, where X dieiriotes the 

cryptographic key as. input data and Y d^nbtes 'the 
resulting phase mask as output data, ' . , 

DIES (PM, 01, CD) 

A symmetric digital image encryption scheme, which 
30 is based on the Fourier transform of ; the iitiage-, 

phase modification (random mask encoding by inulti" 
plication on the complex exponential component 
gMn,n) J ^ inverse Fourier transform, and quantiza- 
tion, where PM denotes the phase mask; and ^ ID de- 
35 notes the original image as input* data kiid 01 de- 

n notes the ciphered image as output data; ; 
FFTS(CO, Sr. SMC) ' V^' V 
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A component 'seflector functiprt;;:bf,:t^ 

imaginary ; FFT components../;G6^denbt^s^the^^ ■ 
age, Sr the- applied-s.electiQn:;^ul'e^ and:- . • 

SMC the resulting set of FFT; magnitudte-^ 
5 ■ AF(SMC, . HF, ■ MS> v . , . ' " 

An authentication :function:^ig|l?^ 

ni tude coniponentsv.^ where :SMe^i^^^ ' - 

magnitude components , HF ^denpt^s ^ 5^SE?|ied^ 
' and. MS:; the. resulting authenticate^ 

10 string, of arbitrary lehgthv^^^^ 

HF, MS) consists.. pf generating^^ 
selected Fourier. ;cpmpori€!nt,,..^ 
strings and applying^ a hash., fiihc^oii' jtp;^^ 
. ing^:string. . 

15 KxY ; , . .. : . ^ vrcnr^t*^u^4£^ pk; 

A .secret ^ey . for a symmetric^ 

. -between two entities with- th^^istin 

' . rv:;. J'.-. ''^ ^' . ■". 

KxY;[Da,ta] : . _ V ,V '5 j^^^^ 

20 - -;. • denotes^^.tfee,^ cipher . text;.v^ne3|S^ 
--.v .- -\ .cryp^osystem. .with:,pieiin^5fc'ej^^^ 

— • .Concatenation of two data ,ei4mfeiits:^#:.i:if^^ ' . ■ / 



CD 



25 , - 'Cover ' Data v.. 



SD 



30 II. 



■ Stego Data, , ; ..::--V.,vJ.^l,- ;,.:^^iVn^iih:A.^-■;^^ .^ " " • 

Copyrightyconterit /Originaj;ityi;pro^^ av ^ri^;^ ■ 

spread V spectrum, technique , . ■t.x.Zv \ 

; ^'^■0Ji:V>"1.-Depending .on . the ":Prpp,^i^j^^ 



for the.prot^tipn.,:;- the ;px^eferr;ed^ 
35^ ratus,an^,niethod according. :to:-^0^^in^^ 
three -different^ levels, of-i ^^sl-rabd^i^^p^ 
each • other , : namely : • individual .^cOEyy^vd^^ 
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ality protection, , copyright /content/originality -protec- 
tion with registered cryptographic keys, .and 'copy- 
right/content/originality protection with an GCC on the 
basis of registered cryptographic keys. • 
5 Due to commercial requirements, the -system 

provides different protection aspectsp:nameley .content 
protection, copyright protection, and originality verifi- 
cation of the stego data. ; • 

The copyright protection of a multimedia data 

10 set is considered as the process of proving ■the ^^intellec- ^ 
tual property rights to a' court of. law against unauthor- 
ized reproduction, processing, transformation, oir abroad- 
casting on the basis of digital evidence da ta.:^This' proc- 
ess is based on a watermarking process WP. and a^^registra- 

15 tion process RP. RP is executed after WP has been initi- ■ " 
ated and. finished. RP is executed by a th^ird; party, which 
represents a different legal entity as the Copyright 
Holder (GH) , and provides digital evidence data.-for' the 
CH required, for verifying copyright ovmershipvvThia spfe- 

20 cific; coverr o^ stego data is, a...digital image, or video 
da.ta. The WP' embeds or. extracts ;ownef~:atuthenticati6ri- data 
in or from multimedia data sets This owner. authentiGa- 
tion data is embedded such that the commercials-usability 
of the. multimedia, data set is not affected; For/ this pur- 

25 pose, a key . is appli§^ to embed encoded owner^ authientica-' ■' 
tion data, called the watermark, into the cover data set 
I, resulting in a stego data set I*. The. wateannark data 
can then be extracted from the stego data if therfcorrect 
key is used. 

30 In the following, WP is based .ori :a"iperceptu- • - 

ally adaptive spread spectrum technique, avspecif ic type 
of a symmetric cryptographic system. In order ' to embed or 
extract a watermark, it is necessary to know the exact 
values of the seed used for the generation: of pseudd' ran- 

35 dpm sequences used to encode the watermark: Because • 
spread spectrxam signals are statistically indepehderit- 
(and . therefore virtually orthogonal), more than : one ^wa- 
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tennark : may be -encoded dnto the mu^it^imedia^^'c^^ 

pending on the seed applied or: -the^fembeddd^ ' 

cation, we distinguish between -a.. pri:^t el; 

watermark. A private watermark';;is^':deflned^^as>'te^6d^^ 
5 owner authentication data embedded ;wtth a*;'cryiitiographid - 

signature as -the seed.^^■ detectionAv^termarl^ 

as encoded -owner authentication^.data!;embe~dded>'w^^^^ 

cryptographic secret key as the 's^fed^ ^W^-dil^ea^nl^ 

between copyright protection;, conten:t:^prtrt^ctioh, :and' ■ 
10 originality protection. - ^* • ■ - ..^i^Knc^^" W'V 

Originality protection rs^tconsyjd^i^ 
.process- applied- after the : copyright ^protfbtibri^|^ 

It enables, a cthird party to checks if Li^h^ ^^kage^ ; 

has been; modified on the basis x)f^>avi^)iiabldic^ 
15 ■ - Content protection^is.?eohsid^ed5i^;a^ 

tional process applied . during- the;?^^a^iri^^ 

tween a./service- provider .«and\^a cuat^er^ia^^ 1^ ' ■ ■ 

tec tion described is based on ;the|^;traii^^^i?^^^ 

imagevdata-and- not on: cryptogrkphifefi'c^ :\^% 
20 .appl.ied durii;]^;: "fche: cortTO:jnicatibfi:?b^ 

.. yidier and V^he^ customer, i:s^i , 

rithms are not -rohniist" against: lojqs^ 
^ other ■ image; trans formations:, an ' addd5feibri^^^^t^ . 

of ciphering algdrithitfe:nf or* thee: coiitfeh^tft^^ 
25 age or video data 'i^:-veriy::^timer:^ 

■ The preseht^method^and^ap^&T 
' an, image ■ or ^ video watermark'^ te^chai:qi^ 

which -embeds and detects the' the . payloadi^^f,v%^^ . 

30 This ^ teelinique is :based'%bn a-^percepiukf-lyta^^ 

;spectraim, technique- which ^provides>;^r^i^^ ■ 
bedding • robust- watermarks ' ^Su6fr/^vt@|h^^ 
cussed- dbn- section Mil v^i^n'^additidn, im^£0^^^^§§$c^^ 
techniques is aj form: of symmetxicitrr^^to^^^ 1 

35 * • to- • embed- --or extract a rwatermark';^*^f^itt^':i^ 
the exact -values- of the-seedv'usefd|:ttoip#^ 

dom sequences, used to encode. ^a waterrii^rk,i^S^«^;i^ : 
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considered to be cryptographic keys, for .watermark genera- 
tion and verification. System security can. therefore: be. 
based, on proprietary knowledge of the keys and provide in 
addition the necessary security parameters needed. for a 
5 secure communication (mutual authentication, integrity,.. 

confidentiality, non- repudiation) in €he. trading; process ' 
of digital images or videos. Because sp'read spectrum- sig- 
nals are statistically independent (and therefore virtu- 
ally orthogonal), the present method and .apparatus . en-- 

10 codes more than one watermark in an image or videG,; f rame ^ 
at the same time., namely detection, priva|:e wa^eriharks^ 
and public watermarks . The detection watermark^aiibWs.-vto 
identify during a scanning process if the st ego; data be- 
longs to the copyright material of a CH. .The. .gerieration 

15 of the private watermark is based on a digital signature 
as the seed and supports, therefore, thirdvparty verifi- 
cation. who. has generated the seed inf brination.: f or ^'the^ 
coding and the decoding of the payload. The vgerierationiof 
the public watermarks enable, the : verification. -Vof ^the^^^^ 

20 originality "of \|:hfe received stego^datav;. on;^^^ 

key of the asymmetr:ic key ;pair df 'thei-ie^f. ; ^ 

. . Since thfe; system provides for .the xegxstra^^ 
tion of the .public key of the asymmetric keyv'tpf&L^ 
can prc^ye ithat he" is the; only .person in .the'; p6sses%l^bh;rbf * 

25 the adequate, private i«iey di the asymmetric /keyVpa^ir a^ 
therefore, the generator of the private wate'rinarks. - v- - 

The system . also provides the secure' .registra- 
tion (mutual authentication, integrity; ..rion-repu'dlatioh 
of watermark encoded images (stego data :sets) v at' a- GGC . 

30 The stego-^ image is registered at the CCG and avdigital.: 
copyright certificate is generated which is-sighed^byv^ 
CCC. If an unauthorized third party has: also encoded ."^wa- 
termarks in the same image, conflicting claims^. irir copy- 
right disputes can be resolved.. Examining the' time- st^ 

35 of. the copyright certificate enables the . secure ideiitifi- t 
cation of the legal owner: The earliest of the ..time 
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stanips Identif ies: the - legal, own i/f ^np,;CGi;^r^^ 

tion request has been applied, ^ :::j:v :v^-. o^ ' 

Watermark, protectipn.^wit^^^^ 
graphic, keys and .the CCC biased :Gopyr if ght^ 
5 based on -a PKI. The PKI issues^pnv reques^t^, pd^ 
tificates containing the public -Ke^^^pf 
distinguished name :Of, the parity'; :c ahd^ a. /tim^ 
certificate, is signed, with. the>; ?KIy: sspr^^ 
trust Is built on . the , validity .of the au^^rys^i^^j^vc^oE^ V 
10 the PKI 's public, key (we assume v:that,utheti^ubl^ic^ '^'i 
thB PKI is accessible, *authentic^l;ly;vi^s#^ 

verifiable, by. every, party)--/;, i;../ V,.^.:/;^' i.::^'n^''^:;nJ:i^':r^?:.^ ' ' 

. ^ In^ the following three,^x^l^evel:saip^^ 
are. described'; . -.-o-vu -^M^^^U'^ ^ 

..^ '^The'' method, vdescribed.:|:inc:^ ■ 
quiresva. suitable waterTOar*king ;teS^iqu 
.. . techniques are known and <can :toe ■:empfi,Q5|edJ)^ 

■ ferrefi .tec;hniq^e;'',is- descxibfed'^f^i^^-tlie^^ '■^{\ 
20 . ;. ^^|i ?ar Registrart^^ 

.j.^ana''origiiialit:y^prpi^eCiti^^ j^t:' ■ y':" 

* . , ■ Depen^^g'i^Dri the->prd|ff il|y ■ ■ 

^or; the :prGtectiori.,.,.. jpur; approach ^iji^^ 
pro$:^ct:ion, levels,, jvhich; are^ based'^n:^^^ 
25 ^individual : ;Gopyrigiiti;^Gdjv^ 

copyTight:i(coxitent;ytpr^g:inaiity pr^tecSi^m^^^ [■ 
' .cryptographic: keys,,:, andncppyr^i^h4ip^>&^^ i^r|; 
pro,tectipn. with a ■"cdc.ion:,;the:i5asa^:;^|^ 
graphic,|.keys....'vSince; the^-firsit:;:tv^|;C^ 
30 of the^- third ;onev wei ;presentc,onl^vt^e^;2a]^^ 
registration based^ .copyright- iprot:e<^^^>ii:i|^i^ 

■ level/, Qf,pirptectipn -.to-^be ;prpyide^^^ioor^ 

ityM:or> copyright protection) ,.;vnote a43|5phai^^^esi:di^ 
below have ; to be . e^ceicuted . ^The^-phasiesitdescra^ " ^ \ 

•-35^ . ,have,.tp be executed f pr ; the^ 'highers^i*;^eye% 

i>e.r. ppntent and pr^iginalij:y .andv^cppyrightss^^ 
Based on one asymmetric key pair ,oniy>;^^i■^ca^^i^ 
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different protection mechanisms for copyright, original- 
ity, and content protection. , . 

As shown in Fig. 3, the system for the CCC 
based protection is partitioned into four processes, 
5 namely the CH with the name H, the B process with - the • 

name B, the PKI process with the name 4, and the CCC pro-'" 
cess with the name C. Suppose (psn , vsh') /- (pCh / vCh ) > (pSb 
vVSb ), (PCb ,vcb ), (psi ,vsi (pci ,vci-)-, (psc /VSc )'v and 
(pcc ,vcc ) are the asymmetric key pairs* of /H, B, and C, 

10 respectively and all the involved parties would like to 
exchange information by oil-line communicajtiori^?:: !^^ 
case of off-line communication, the security mechanisms 
to be provided for the communication are covered by op- 
erational means). H has an authentic copy of' Certs, and 

15 Certc whose signatures were verified with the authentic , 
copy of vsi . B has an authentic copy of CertH- and Certc 
whose signatures were verified with the -authenticrcopy of 
^ vsr. C has an authentic copy of CertH and Certs^ whbs.e sig- 
natures were verified with thet authentic copy- of ^ysi. The 

20 following phases are then applied^: . .. i , ^ ; > 

Phase 1: ; ■ 

H retrieves the cover data CD, generates • a\-uniqu'ei-^ 
fier IDcD := crh {H | | SN) , :where SN is a serial* nximber ;- :- 

25 stores IDcD/ and retrSfeves 'the key pair (pSh;.^- v:Sh)>:^ 

Phase 2: r- ' ' ■ ' ■ ' \y ■ 

Detection watermark embedding (image owner Jauthenii-cati 
and copyright protection) . : . ; . :v> o;3^:> .^^ 

H generates the stego data SD applying the: trarisf^rina^^ 

30 tion: OWEA(crh(pSH) , SN||SN, CD, SD) . ^ • ; . ^-vVv^ 

■ Phase 3 : ;.-^v ■j^^.... - 

Private watermark embedding (copyright:' protection) 
1. H generates the private Owner Authentication D 

OADcD applying DSSMRc(psh, IDcd/ OADcd) • " ■ ' - 

35 2. H generates the stego data SD applying- the tiransf or- - 
^ mation: OWEA(crh(OADcD) . IDcd/ CD, SD)v, >whefe CD is 
the SD of the last phase. j'.' ' 



Phase 4: . •• - _ ;. . .:■:/.. : :'vr' Jt;:c% ■ ' ;: 

Public watermark embedding (originality .protect 

1. H generates the set of magnitude^-rGomponents , . apply- 
ing FFTS(CD, S, MC) , with : the-selectioh::;fainGti6nv.Sv:^ 
and the resulting, set -of the FFT magnitude: cdmpo- 
nents. S.is given, by the. normai|2ationrcrff;t^ 

tude components with the JPEG or^^IPEG,^gu■antl'2a 
table entries and constrairiediiby . these.. components^' > . 
that will be modified during .'the cGding^i^pro.cess' O^^ 
the public, watermark. ^. . ; ^ ''i^v:; ^- • : ■> v 

2. H then generates- th^ ;au then ticat ion jd^tifefoi^^^ 

; nality yer^ification, .applying:-iAfcCMC:,i:.Gr^ wh^re 
MC denotes the in the. last .step- generatisdAFF^ magni-: 
tude,, component set,. crh,..the ^ applied hashirii^i^fuhe 
■tion, and AM the resulting.; authenticatdiOnMS^'^age^ 
.output. .AM is generated, by 'Goiay^rtiyi^ the 
■■■ eye^ry ^magnitude /component -intoi-aSs^strin^^^ 

.. nating, the resulting strings^fi.;ew^:y:;^^n^ cmi^ 
ponentvinto ione.-string.../ '-'>',i;.: ."^v:.-ix!#w^ 
3 . -AM is then, -cipher^d^ with-^tJ^ 

■ and. embedded; as T^^vpaylp 

applying OWEA^cirhtvsH) , pc„ (Akl^iGe,:;. SD) ;S:vfe^^;5^^^ 
■ the. ;SD':;of • the'-.,;Iastr 'iphase •^b;-':^r-^;:.^-^\. ^^i:p.\:-M^Ci^:s'2^'^ . M' , 
Phase., 5:.- , , ^ -^^ :^ ^ . ^ j,:v^i4r%;V;n^^^ 

H then stores ^the^^rSiiul z^ua r:y. 

Phase 6:. ' ' ■ , ' ■;. " ' . . 'i^ ^-S^f;-^^^^^ 

H and C:- execute .the r:f oil owing., ^stepjs^ f^dk^ith^licl^fe^^ 
tration or validation of copyrightixecpiests:^^ 
eratipn, of /copyright- ^cer,tif±cat:es.\ 'cM:i^-/;i^ ^-M '^'^^^m^^^Xr >v- 

1. . H generates, first ;the ..copyright ,requfes;ti^^ 

■ CRD. : = crh CSD I I SN=) ■ and then .the cbpyri^S^r^^ 
CR^ CR := <TD.| | SigTD>;; .with:^D^n::i^§.€RIDi|r|^ 

: - and.: DS^APo (psH,..TDv.:SigTI»^v. HL^henf trarisi^^ to-^G . 

2. . .C. receives.,CR and. verifies. ,.TG,ua!E^ (vsh, 

S IgTD > iyR):> whete: . IVR; denotes :th^^ int^rittfedMaie 
. :> ' ^yerif ication^ result a If. IVRr ='^Grh?(jrD^?Ci.^|«^^ : = 

CRD I I TVP I |.H I I C then TD . has .been rsuccfessild^^ - 
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fied and the next step shall be executed. In kny 
other case, the processing and communication between 
the H and C is stopped. . , • 

3. If verification was successful, C generates the cor- 
5 responding digital copyright certificate executing 

DSSAPg{pSc, CCD, SigCCD) , with: CC^: =. CRD] J TVP; C* then 
stores the copyright certif icate-'CC : = CCD |-| SigCC 
and generates then the Copyright Confirmation Reply 
CCR, CCR. := <TD||SigTD>, with TD := CC | | TVP | | C | | H, 
10 and DSSAPg(psc, TD, SigTD) . C then transmits CCR to 

H. * . ... . .V ' 

4., H receives CCR and verifies TD, .applying*: DSSAPv,(vsh, 
SigTD, IVR) , where IVR denotes the intermediate 
verification result. If IVR .= .crh(TD) with; T^ 
15 CC] I TVP I |C| |H, then TD has been successfully yerir 

fied.. H then verifies and stores xhe:CC>' The j^follpw- 
ing phase can now be ^executed repeatedlY, 
sary, without repetition of the - previous; phases v;;- 
Phase?: ' . ^ \ : , . ^^ a- 

20 H and B execut:^.the following s.tf ps .f or^ the .tradihg^^ V-/ 
-copyright, Content, and originality pWtected digital . '^r''. 
data {images and viii^o)': . ~. , . ■ .... . . 

1. B generates the trading, transaction ,T1^,. Tl.vi • 
<3iDt |sigTD>,, with TD := IDcd | |TVP| | B | | H and^: : / 

25 DSSAPg(psb, TD, Si^TD)'*^ B then transmits "Tl-' t^ 

2. H receives Tl, verifies TD, applying DSSAPvIvSb/ ^ , • ' 
SigTD. IVR) where IVR. denotes the,; intermediate y^^ 
fication result. If IVR = crhCTDj,^, -with .D • 
IDcD 1 I TVP I I B 1 I H , then . TD has been>successj^uIly^^S^ri^. 

30 fied and the next step shall, be executed^ ;^:Xnv|iny^/y^ ^ ^ 

other case, the processing and: cbimuriicatidn;,fc^^ 
the H and B is stopped. ' / - 

3. If the verification was successful, H retrieves ^yrith 
the IDco information the corresponding ys'tego;'^^^^ 

35* ^ and generates the trading , transaction ■T2- :=' ■ 

' <TD| I SigTD>, with TD,:= CD |,| TVP | | H | |B, ^ piES;(PM*; ^SD,- ' 
CD) with RPMG(DSSMRc(psh, B | | SN) PM) and^'DSSAP^^ 
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■ TD. SigTD) ■.• B'l -fSN desigriates-'.the- B-'iti^^me-pi^cituti : 
and is called the mask .mes's'age:-- ^ t fieri '^stdres ■ ' 
DSSMRc(ps„, B| |SN) and traiiWits'/'T2' to'-B';'' ^ " 

Phase 8: ■ ' ' • - tv 'X':-!:ix/^'i:.-'-': .■■ :. .\i>y.' 

B receives T2 and verifies' I'D / appgi^ng DSS^ 
IVR) , ■ where- IVR denotes the^ interine|fee;^^f|fi^ 
suit. If IVR = crh(TD) ,- with TC' :^ tl3| 

has been succ'essfuliy verif i^ca' ^M^'ci^ ''i^J]t^M^%tored ^ ' 
Phas^'-9':- • ' -■ ■■■ •■ ■■ ■■■■■■■■ i;.. : •■ : n j5>.-'.-:^ J::.. 

After B has paid, H retriexres -TKb- and-Vsdrife-"'^^^^^^^^ -b' 
receives vceflKs], deciphers it (pc^ [vcBllKBih ; .^li^ gener-.. • 
ates the random phase' mask 'PMv'Tifis r&idism :|jl^^ %ksk \s : " 
then used for deciphieririg CD' '(blESt'PM; - 'Ciff^S&ff^ gfet ''-the . 
original' .stego- data SD. ' r-.: ; 

Phase 10: - • ■ . ■ .<i^\A:mfU<.9: 

B' may verify the originality of ^t%^^it^i^l^aa|#';|^ re- ' : 
trievihtr the- public key'^roih' H' anid'^li^iyii^?^^^^ 
0Vn7A(G.rh.(vs„) ;SD,pc^[AM] ) / B- th?n"^ 
ing-vcii [pc„['AM] K - H then v^rif i4^'.-AM'^ai>piyin| ^ii^ 




ten, the'-' contents off -tlie; SD'-iiy-^ilten^^'iSd^^ .. 
yeri^ icativpn' ifa^aJs,: , -^^^ 

'unauthorised- parfei^i'^-'^- - : ''■'■ : ■ - ■'■■''"'9^'\'^0^ ;|f|-?3i|^j^|^.'|..,4/ ,- . 



• ■ '•^ >;-V-- .■-•V. ' ..'"S'.i i-ciT .&-j^1»f^,^J|r'''3??^- 

■ ■■ ^ ■ '-^^'^Remark:; '•"'.■■'■' '■ 'f ^ ' ■^'•fef^^-V ''■'{:.. ■.'"■ 

'■'iDepending' on th&- applied^f^sf^^ 
■the- private' dfecipherfnent^ key^'m^'^)e'-^|y^ifeif^^fii«^^^^ 
30 vate-^ signature- Icey and- the • pmbiicKiiiifi^iiijI^I^I;-.!^^^ 
identical- 'With •tiie'^pubiic ' ■vretificatfSn 

Since the generated 'asiTOnlt'rlS^^^^ are ' 

unigHfe:--vthf CH ckn ■ b^■■^miqu^i^^ia4tit!lMte#li|^ 
■thte' digita:i/^copirrigHt' cer^ii^^ai^^ ., 
35 * ■ ? :■' ■ ■■ ■■■ ■ B may-bheck-' thte ''Wwr^gm''^^TtMiS^4^''~ ' '*'' ' 
queuing C (or H) to transfer ari autfieiitp^t|§^#^h^^ 
copyright -certificate for a givfeii-id^^^a^ii^^^i^^-^^^^ 
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the data transferred, . the applied protocol, is the same as 
described above (see phase 6) . . - ... '\ 

If H would like to transfer a specific copy- 
right of a CD set to another legal party, he may- initiate 
5 a copyright revocation request with C* The different 

phases of this request are analogue' t<S;^ the; copyright 'xie- " 
quest. ' . ■ r- 

For copyright verification, the GH first 
verifies the detection watermark and then, the privates. wa- 
10 termark.with the extracted SN. . v - 

Copyright verification may.be cheeked .by 'a / 
third party, if the H transfers the. digital signature- ap- 
plied for the seed. Based on the retrived: bublic :key /f rom 
H, the third party can verify that H is the only? one . who 
15 has generated the corresponding signature. • ^ ... / ; 

II. b) Copyright., -content / and ^originality..: 
protection with registered keys - ^ • -'^ -^^.'^*p'-:^r: 

As shown in Fig. 2', the apparatus.>£or^/the-J} 

20 copyright, content, and originality protectiqnrwith, reg- 
istered cryp>tographic 'keys . is . part i.tioh'ed . into vthreeV pro- 
cesses, namely the feH with the name:- H; . the: Buyer process 
with the name B,. and the PKI process with^theo name- i/^^^^^^^^ 
Suppose (psh^vsh) ./ (pcH^vcH) . (PSb. vsg) ; '{p<^^^.yc^' , 

25 (psj, vsj), and (pcj^vcx) • are asymmetric/key pairs of. H, ^ 
B, and I, respectively. Suppose H has an authentic and 
actual copy of Certg which signature was verified with 
the authentic copy of vsj and the B has an-authentic and 
actual copy of Cert^ which signature was verif ied^with 

30 the authentic copy of vsj. Then the, same'v phased v 'eke e^^^^ 
phase 6 as for II. a) have to be applied^ ^r. ■ , ^; 
Remark: ^ '■' '.'i^: 

Since the generated asymmetric-key, pairsc are 
unique, the CH can be iiniquely Identified ;iji':^ii^ 

35 ^tional watermarks by unauthorized, persons have /been en- 
coded into the- SD. ....... w;,;.^.-.",v^^-'-^'^-^'r--. 
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II. c) Individual copyright, ..cpntent, . and., 
■originality- protection . • . ■-:r-:--:.r--^^---'r^'::i^,^ icr'a-h 

As shown, in Fig. 1 / the ■apparatus., for r.theldn- 
5 dividual copyright , content , and , originality: JE)roteGl:i:on f ^ 
is partitioned into two processes^,^;;^|t§^ 

distinguished name H and the B process with the distinr- 
guished name B. Suppose (psn, vsh;) - and .; (pcHv. vch 
asymmetric key pair&: of . H, (psB, vs^^v andrfCpcB;,^/^^ 
10 the . asymmetric key pairs of B. Suppos^e has/^an .aut^ientic-i:. 
copy of vsbv vcb and^ B- has an .autheritio ^copy -.of vsh, vch- 
Then the same .phases: as .for-.I^vbO :haye; tbi^feevi'^ppli^dvr 

■ /Remark: - ^ . , ■ [ v^ri.$;\fod., ^.r.^-^ ' ' 

' In the case. :of , a .legal:-popyri'g1it^ 
15 can retrieve the, payload of . the. d^t^^ctionr^watBi^ ^^and cd.; . 
construct the -signature taken ^as ^e s^ed^;J0f>J^ 
watermark.. ;.Since.: the: generation : pf^ /^ - 

key pair by two distinguished^; eiiti^^es^^i^^^ 
. the, generatiion df -the.:dIgitaiy^i^h^t^ir^4^al^^^ for ./\ 

20 -the private wa,e^ 

^J- against. coi^yrigl^^ ;/ . 

protection, with r^^istferedskdys^vJ/; 
■ same ^asymmetric. key. pair by ^two=:disJ^i^ 

can..be rprevented;.- --.vL - -r^-^-- ^^.^iM^^ 
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III . Embedding the ^watermar^ks.. Jx:^ '^•^^>'^-'.ii'a^ cJ: . 

- . ' ■ The: watermarking vitechhique^'de^^^ 

30 comprises, the/ following , S:teps :.^-w x:::::jy-.^f;^y'i^jtfk3^ 
a) An. .error-control. .Qoding^ te.clm^^ 
message to be transmitted in the wati^nns^^ .. .... 

: « . , \ -*? . b) A method to encpd.e >i^especj:|i^i^i^ 
the .^nessage. resailting .:.f rom •s.tep;,a) -i^v^^- Kt^^^f^;^ ; ^feiii^^ : 
35* , c) A reliable method:rfori.embed^ 

coded message from step b) in: the: image! -i^^ 
introducing visible artifacts. ' v,; ; k.'K:^'^'^'- 
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d) A watermark extraction technique that is 
robust against compression, translation, rotationv -scal- 
ing or change of proportion of the stegd image or. video. 

. e) A watermarking technique - for small- 'and "or 
5 irregular blocks. , . .v * ^ . ; . . . 

- f) A method that allows tp^^detect . if ■a- ste^o— 
image was marked or not with a given key withoutv'jext'r-act- - 
ing the encoded message. 

g) A method for watermarking witho\it teitipM 

10. which is. resistant to translation ^ rotation and scaling. . 

h) A method for watermarkirig^^-vi'debSf. 

Each of these aspects can be applied- ^to cbn- 
ventional watermarking techniques. Pre f er ably 
used in combination to provide a highly reliable/ vrbbust 

15 and. powerful method for marking data setis. This •method" ' 
can.be applied for any watermarking '.applicatidris^v iri^vp 
ticular to the application 'described in section ir vof - 
this disclosure. " ''ti- ■ ^■^■W-^V*;.''^* ^^^^^ 

Steps a) and b) can be used for embeddi iwa- 

20 termarks in any^- type of data whi lie steps/ c) 15 optimized ■■f 
f-or embedding :watermarks ]±n images or 'video if rames r-^ 

In the, following, the above .meht'iBried^^-^eie^^ 
ments bf the watenharkin^g technique are described/iri^^^ 
25 tail. . .. '>*^' . -^^ i,.^^ 

III. a) Error control coding - • ■ ikv; / ' ^ 

• ■ Error control coding is -applied^:t6fcithe;'fm - 
30 sage prior to encoding step Ill.b)-. When used. 'ih -^coi^^ 

tion with the procedure described in section II,; the mes-- 
sage corresponds to one of the blocks BL^ . ^ : ' ' ^^^^'^^ 

Preferably, symbol based Reed Solomon, (RS) 
codes are applied for this purpose:. The^advaritages-^^^^^ 
35* fhe .following r - ^-^^^^^P^-'-..^^^^' -'/^-; 

. . . - RS codes correct symbol errorsvrit^^ 

bit errors, and • > - • ^ ^ ^^. ^ ^:pj)^if^'W^I^-:.U^-^^ 
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• --RS codes can correct. -^e^rasure^as^-^ 
errors . Erasures can- be ac tored^ out *:of ^ -the^^lc^ 
which means that ''erased" symbol s<-.Gam^b'ev>±gnpre^^ 
not play - any-; role in the • error eontrdl- mechanism - an ' 
5 erasure is useless redundancy. • .'ct .fe.;,. - ^ i ' t , 

Being able to discard eir^ed.syn^ has tWo 
advantages':- . " ..:.Mvf.^-: i^^i .^y U. 

- If the posterior vprobat>i'lityc^^^^ 
symbol is low> it may be ignored;. • - ^-^^ 

10 RS codes :only come . in: , s t^n€Jar^i^<^^^ 

example a 255 x 8 bit code is coitoonU^^4Most^^con^ 
RS error control codes :appear to :be t^oo ; l^a^g^^ be used . 
in .watermarking. ^ However it :isvpQss.i^te\fticfi'ia^]^^^^ : 
any RS code fit a watermarkingivapplricaldipndbj^ 
15 selecting symbols as. being erased jfCbecause^vt:^ : mi- 

never embedded in the .image 'in >.tJie,^pi - 

1 1 1, b) Encoding the message- ^^-.y-} jXB^^ 

20 -.i;;-----' "-h I%^i^ng-^€5nGod^^ . m^ , 

,,ted.; in the ^atermarkt is/;,tr:ansf 
for being; used in iihe'-modui'atioon 
the- samevtime^. it is - ericrypted musing:?' a^^^^^ 
■ If:;Ujsesd wiih the metltod5^;of'!,fS^ctBr<^ 

25 encoding procedure '^^s ^access , to the%6fyptc^i:a|>M M- 
PH and vh Kor their hash values ) > which are^; apipfe^ as- 
seeds to generate pseudo-random:'sequ<e&ceiS^;-*a^CKdi^ 



below.: The public key is used- for /;exicoding;|the?^ 
the public, watermark,^ thev pirtLva;tex;kef^^:isiWi^|^^ 
3 0 private ^watermark .> Knowledge^. of i tliev icorresg^rtpln^^ 

hash value) is required fbr recover in#rthe||ft^^ ) 
the watermark. ■ . ■ ■t^hi^-^.t^^'-m^^ ■ 

^ .i: A- watermark ^ may :^e - embeddkd^b^jex^t^ -1^^'-. 

the -key -owner.; In - this^^^form^ spread' .s^^^cfeimi^^ 
35 * ric key cryptosystem. -From the point o^ v^i;e^^^ 
watermarks^ in images or^videos* :giveri^>ithe1Sferi^ 
keys the sequences theirlselves caxi be' gene^rSfi^^ 
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spread spectrum sequence is one. which combines desirable 
statistical properties such as uniformly low. cross; corre- 
lation with cryptographic security. ■ • . 

Suppose we are given a miessage B ,{e.g. that . 
5 was provided with error coding in above step Ilt.a) . ; The - 
message has the ..binary form bib2 . . .bL^^^here bi are its 

*-v. . - , ^ , 

bits. This can be written in the form of a set; of;; symbols 

siS2 ■ . -Sm " niost generally by a change in .a,.n;aii^ 

base from 2 to B, The next stage is .to encode ..each .symbol 

10 Si in the -form of . a pseudo random yectpr , of . lengtjti^Ny 
vfherein each, element of this. vector,;.eithej:i takes- the . f ,. 
value 0 or l. ;N. is e.g. in the order ;0f iOOO ; to 2;p^0^^^ 
the order of 10%-50% of the total number of :,i^lag,fe: q 
cients (Fourier components)^ that can, theoreticallyv be.- 

15 modulated). . ^r;j:vVv; .; 

v-ln a preferred embodiment, this ,is^ carriedvv., 
out by using a pseudo random generator 'seeded , by -the ^key 

" crh(PH) or crh(VH) • ^ % 

To encode the f irst' syrnbol a pseudo random;. 

20 sequence. V of length N + B - 1 is ..generated. To 

symbol of values where -0 < s < B'" ..the elements v.s.,j^Vs.%^^ 
... Vs+N-l extracted' as a vector ri of . length. N..; For 

the next symbol another independent pseudo random^^ser^a 
quence' is generated and the symbol, encoded as- a. random/. 

25 vector r2..Each succ^Stelye'''symbol is, encoded , In/ t^ik-^vsa^ 
way. Note that even if the same symbol bccursj^ini d^ 
ent positions in the sequence,, no collision, lis possible: 
because .the rcuidom sequences used, to , encode ^thCTl:Jar^,> d^ 
ferent - in fact they are statistically independent .-. :Ei:- 

30 nally the entire sequence of symbols is encoded ;as;. .t^^ 
summation: . . . ... ; : ^ 

The ps eudo - r cindom vec t or m . has , Nv iel ement , . ; 
each varying between 0 and M...In a next .step,,-,;:the.veiLe-^-o • 
35' ments of m, are offset to make their mean zero. i..Th^ ele-/. 
ments^will determine -the strength of .mo.dulatioh^ofn.the.l: 
Fourier components of the image in step : III. c.. * ■ * ' ■ 
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V/hen decoding the watermark-; 'a- 'Victor " 
{read-out message) is derived' from -the ■■§teg6-im^^ 
oblivious watermarking, m' corresponds to the* modulated 
Fourier: coefficients. Hence > in/g^hef al^'in' 'will riot 'be 
5 equal but ^^similar" to m. ' " ' " ' 

To decode s from v ., tt^-'^el^em^ ^re 
first offset to make their mean\'zej^oV tlien^-^'sSarting^^tr^^ 
the (known) seed, the first ra;hdbm%equence^^v n 
+ B - ■ 1 is generated- "and - the correlation -of V:^^^ith ih>'' is ^ 
10 calculated.' The peak of^ the c^rr^iatiibiv^igdtcates tlte^^' 
offset SI in the random sequence that^^s^^aSM'^fb^^^ 
ating-r^. Then, the next rctridom sequence%^ is'^gfeMeir^^t^ 
and cross -correlated with m' to r^ti^xfeve ^i2f'' e^^ 
;Reliable communications bf tK^^^^ 
15 best .accommodated by using m-sequences :pr - Gplca^^^^ ' 
generate the^random/sequehcefs r^i'r^i^ 

■lation.: V- .:• - ■ ..y ■■'^h'-^^'.^--^' ' 

where bi . and ri • are -bi and r£ *in Whlth "eacih bit 0 was 
20 replaced by 4 . ^hd each vbi^ 1 ■by;:-|-;:dui' fc^ vtlie^^^ 

between the • grd^ ■vM^c^si^r&^m/^^ MM (*, iJif/.^iyW^ m 
this case the values "^of m are ■.betwe'en'-'^^^ a'M. li^ !;Th:^n the' 
•decoding, is carried out by simply c^^ 
eachj-of the random ■sequences' in -■:tufn/-'lf'-^^^ 
25 .-tion' is' niegative - ti^Bn a'^biriary ■ oftS-^fiSs-^be^^^ 

wise a binary- 0. ' • .. \i. a\?V'5 v-::'!;.- 

Gold codes and ni-^sequenc''^^, ''^60)^^0sut¥-'d''^-'^ . 
:good :reliability and secxycityrdf'^^.isMm^^^M 
■ever. Gold codes have :tKe^^dvari!^ag|:=^tsh^'^l<^^ 

30 register length k (N=2''^l) ■ there'^^S^ig^^Sr^lf^^lc^'fyr^ 
the key (22"-! instead of 2^-1) and a befct^l'^c^Sela^t^ . ^ 
properties if only part of the sequence %s.fu^e^^^^ 
If M, is sufficiently large,^ the stattsticM^^f.ai^^^^ 
of the message m , should ^ approach 4 Gauss^ah^^fCe^ 

'35^ ; Limit: Theorem) , A Gaussian distributed-waj^em ^' 
. advantage ' that it is more dif f icMt^t:^^^ detict^ 
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cince increases with order M^/^; in other words-, the. ex- 
pected peak excursion of the sequence is only ordier-. M^/^ ^ 

III.c) Embedding the message in the image or videos 
5 , ' ^ . ■ ••■ ^• 

In this step, the encoded r^essage m (e:.g. as 
obtained in the previous step) is applied to the:; image, or 
a video for generating the watermark. . ./r.::; . 

In contrast to steps III. a) andv ill ;>j'i> : em- 

10 bedding the message in the image requires some, iknowiedi^e v 
of the nature of the data stored in. the ^ iiaageK|;fIn*;^^ 
following, the image is ass\imed to be; a> t>r.o-dimen;s"^±^ / 
image that can be a still image or a video ^framev-i'^be : 
method is optimized for robustness, against ^opeira^d^bhs 

15 generally, applied to images or video frames: such ia^^ 

translation , . cropping , ^ rotating , scaling , ;.ch^gev: of - ■pro- 
portion. (The method is not . optimized ; fpr othen^ 
data, such as sound or text,) v \ ; 

. . ;In, ordeir to achieve robustness agaxnsM^Gircu^ 

20 lar :t:ranslatioi^^. .ihe image block ^s . £i^rst: -subject^c^^^ 

Fourier transform. jThefi^, message,. m is' Aised to 'modul-ate ' - 
the. Fourier components . "in addition.^ to ;'1:his/ -a;^-^ ^ 
is embedded in the image, which template canybeivUsed^ 
detecting rotation, scaling or change of .:propcfet:ioh;:.of ^ 

25 the image when readiii^Jthe watermark. A' tiHng^:^r^ 

and suitabl^^: phase-dependent correction; are applied.^f or 
providing^ robustness against cropping. : 5^: 

Figure 4 shows a detailed di^gramtdescrribing^ / 
the .embedding of the watermark . Calculation^sfeartefe if ro ^ V 

30 the cover. .image: v; 

1. If the image is a color image, then ; confute the^v^^^ 
nance, component (by replacing each -p^ 

+ b/6, where g, r and b are its green; rfeaJr^al^ \, 
components) and use these values for: the-fQil6wihg?o 
35' * ^.calculations . ;/ .■•n': . 'H 

2. If, a predefined block size .(Nb)is used, divide "the; . im- 
age into adjacent blocks of size Nb x Nb .{■e:lg.?.A,l:28 x 
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128 pixels) . Otherwise Nb is -the* mihimujiS^^^^^ image 
height and width (Nb* =min (hdightV* Width^^^ ■ - • i 

3 . Map • the image luminance levels (or- 'gray levels for a 
black and white image) because .ifc'/correspon^d^ to- a - 
perceptually- "flat" domain by replacing\ them with- 
their logarithm. ;The logarithm/i^^^godd-vdhbice be- 
cause it corresponds of th^ W^er:^?echhlr^;lavO:^^^ ■ 
describes the -response -of the- hiimah vvisua^^^ 
chaniges of - luminance . - 
Compute .the -FFT (Fast Fourier aiisi6riTl)t:6^/^ 
block. From:..the reial and .imaginary ^;^'c€>mp^^^ 
dn- this ; way, ■ calculate corresE)dri<iMg vmi#i^ 
phase components. -V r: ^-/s - . 

■ The magnitude components- aire :tr^nsitatic>ri"^?^^ 
will therefore be used in , the^rfol lowing SnSdiiM^ 
^'Steps. : (However, - it is poss;iba,eru1:;o>M#^^ive^^^^ 
invariants, from the phks^e spec^r^iia^^as^^ 'w^ ' - 

could also be modulated) . . : . 7'^^ J:>fe%. '''^^ > 
). Select the magnitude comp^n^h^t^s- tG>^ 
.-.^ncode a messa:ge m. of , length^N:^j^;;t^^ ■'■■•^ 
. domponerits ar4.;mod\ii^ted:;^>^^^ ' 
ing, any components' can he x:[C^<3^ 
watermarking, : because of 'interf erence 

age witl^,;-the waterni&rk, ; the : larges^^^^^ . 
components, -(at^; aB^t^the^ Irpwestf^ 1;^ /t^tdE^^eri-^-^ ' ' 

cies I ^ are avoided ^nd cpmpone 
(about next 3 0%-5a%) ,are -usfedr'^^th^se^.^^ 
ad j acent j and . are thus-: located si^ 'k"|ba:n^^ 
. cies. r These, figures are ctosein^^^^Ga\isei^^ 

give, a good compromise between robiastng^fejai^ 
ity of 'the^^watermark. • -r'-' n^ -a .1 '" 

. There: are several methods* f or. If efti^ 
.:.;tpu:bev modulated, = f or • example p.-rf> . ^-^ -vi] ''Hj^^S^f 'll^A^-. 
; a) -. The selection of - the comp^)ri^t^to- Se?*m^ 

■ does not depend on the given: imiiaige^tf^^I^dM:^^ - 
^ \ same ^components are sel^ect^ai ^^c^ 

: author as well as- the ref^dier ^^^th^^^^rit^^ 
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either the.. positions of the components to. be se- 
lected in advance or a key which allows by means 
of a pseudo-random generator seeded by this. ; key to 
generate the positions. .i . .■ ■ 

5 b) The largest components (inside the allowable fre- 
quency range) are used for mocha la t ion. .::.v 
.^......^ c) Almost all magnitude component^ in , a ^given>;^f re 

guency band are used. The upper, limi-t -^of^;. the. band 
is computed such that the number of re'giiencies 
10 inside- the, band be larger than and. as^^clos^e^as.. . 

. . possible to N.. * ^^yy vC, ; 

vv In. the methods b) and c) ; the order r in .whicKitihe^compo- - 

i;'; nents to be modulated can be provided by.;a\;.pseud6- . 

, random .generator seeded by a key .known . by ^bb.^^^^^ 
•v;' 15 and reader. . ■ . ■. /.,^;:v^> . c4'- 

When selecting the components tb^ be -modul^ , : 

must be . taken to preserve the symmetry-im^^ the 
^ Fourier -components F(ki, k2 ) by tfae^^act -that^he im-^^^ 

age block is real. .valued: ' / ...v-- :■:■■...^i•^^;^^V^i^^^:^i■/^. /: 
20 , .F(krL,/k2) = F* (Nb " ^1.. -N^',- k2) ■ 

--.^ Once the:'^magnitude cqmpbnents : (M^ r. 4'^;.-. M^) :^to.:.bei modu- 
lated. are chosen, the corresponding vaiue^.;mi;:of;^Jmes-: 
. sage m is added to or subtracted from, the /correspond- ' 
""X.-. . ing^ selected' magnitude component Mi-: 'Additionv-:is:. used, , 

: 25 if . the eorrestponaing phase component^ Pi/^isiif .tu 

and Tc, subtraction if it is., between JC -anc^ T^^^^^ 
provides robustness against translation ;an^.^^ropp 
■■ (see below.). ' -k.. - ■ 

Before-, adding/ subtracting the . values: m^ ;toy f r^oml^Mi , 
30 the vector m can be scaled to ajdjust the^^magnitude of 
its elements to those of the components. MiVi^^vvf^K.- ; 
Generally, the elements mi should be of the ' same order 
i; of magnitude as the components .Mi,. .The..;deptl^^ 

latipn, or amplitude of the embeddedr.signaliisho 
35 * . pend on the objective, measure .of .the perceptuai' *s^^^ 
: r nif icance.. The lower the perceptual ^signi^x^ 

higher should be the amplitude of the watermark; 



WQ 99/17536 PCTT/iftefcoO 

; Moreover, to insure a . good .invisibilivty ^oh^e .can use 
local energy and masking criteri6nv;(seej- J'.'Fit Delaigle, 
C. De Vleeschouwer , B. Macq, "Digital, watermarking" , 
Proceedings of the SPIE ; Electronic. 'rlma'gahg r/iScience. / 
5 - and Technology, ^ vol . 2659 : Optical" Security- and' coun- 
terfeit Deterrence Techniques, Saii^^Josev^^rFebr^ 
1996) to determine the depth of ^modulatiph.-' ^However,: 
for simplicity, the amplitude .for laM'^^^ is ,r 

kept constant . This constant can- bie^ j>redefined :by . 

10 owner or can be some function of-'the^meak^vah^ the- 

variance of the energy in the d-magfeVoir^ife^^^^'^ 
. transform and the values of : thie.ps eudo-ra;hdofe^ m 
containing the encoded message (ei^gr^^^ + a 

* variance ( energy ) 0 /mean (m) , where; a- is^ :art'p^ 

15 constant). ^'^.^..-y,::--- ..-u j;; 

6. Add a template by a second, modul^ationj; 6^^^^ ^ 
components.. This is described in ';mbre>;di^^^^ 

7. Compute the inverse FFT using the'iphaB^Xcoihpb^^^ and 
the modulated magnitude -components^; / > ' H-p'?i^^ -^M^^ 

20 8. - Compute th^:,ihverse. of the pe^cepifcuai maj^ 

,^ ^, . of : Step '3 .- Forfv Weber nFechner;i>'law^ . 

.. .function is an e^bnieintial . 'Uj^-J^'^.:. :.■ ^ u^^^^^^l^v 

9 . . Replace each, watermarked block In ^the^/ image*^.t'^?bbtain 
the;; stego-imagis ^, • - • V-j^^i-:i9;0.;47^ 
25 10 ... If V ■ the...image - is:'%i^^plo.r -iinage> ^^then^ires^Ss^^ red, 
green and blue components by the- r^lativ^^ 
luminance introduced by ' embedding^^^^at^ri^ 
cally, the red, green and blue . pixel^.,0'iec^ 
^ach in^ program memory , rlf- 'OyerEMvyirslor^^^^^^ 
30 . cursv then the pixel is setvfco ^tWiujpper'^riy&i^ or v^^: 
lower bound 0 respectively. ' *> ^i!C5t0;<iyi^ ! 

Template :> . -r.- . ^ - r^. _ n^- '•fA|i:ife^>y|^itt? ' 

As .:mentioned.:above,- -a template: is ^addWdM to the i in 
35 *s-tep ^6 .; Two kinds of templates . cahr -be;* Aised^^^^ V^-:, 
a) ^ a RST template - to -detect/: rotataons^fe^^ 
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b) a PST template - to detect- horizontal and verti- 
cal scaling. . . 

The PST template is rather used in case. of video frames 
5 (changes of proportion are more likely to occur*': dn- the. - 
case of videos than rotations) and th^i,RST-i;&:.rafcher used" 
for still images (photographs, painting?, etcv'. • - 
The steps for generating the template are illustrated in . 
Fig. 5:- . • — :^ 

10 20. Apply a log-polar or a log-log map to the, magnitude ^ 
components. The log-polar map transfotins^^the ^magni- . 
tude components of the FFT into a; polar coordinaite 
system (G, log-r) with logarithmic radius : axrs: as . 
.follows. Consider a point {x,y)€9l^ iand;xdefdne^^ 
15 x= e^ cos 9 ■ .*. - -^ '^^'^^^^^ 

.. '..y=-e*' sin 0 •* * ^^^^y- \ ■r.'^'i-.M'^^-'-^ ■■ 
where fieSR and 0 < 0 <?27C. If r= e^ , |J,= , 
for every point (x,y) there is a xinique .(0/:i^g^^^^ 
that corresponds to - it . - Iri the * Ibg-^pola^^r^tsri^ ' 
20 ^:t.iph, a; scaling of the image ^eeudS;: to :a4|iff^ 

the c^pmpohentsv aldng ^the; log^r ^axis:^ of , 

the - image leads * to an of f set ;alc)ng ±^ 
larlyv; the^ log-log map transforms . the :magnit^!ae;t^ 
ponents .into a logarithmic coordinate^ syst^elin^ 
25 log-y). as follow^ For^ . each point ■ (xVy) eSR?': Jd^Mn^r ' 

, ... 'v' .x= e**'' • / ^: . ' '■ v.4Vi^^^^-"^"^-^'-^.V'^-'-'^* * ,. 

• y=- e^ ■ . -^^ : ■ 

Then, a=log(x) and p=log(y) , and in thisi.l<Dg^iog-*Te^^ 
resentation, the horizontal respectively ]yertica;i 
30 . scaling leads to offsets . along the iog-Xv^SE^ectively^' 
log-y axes . ■ \ ^ - '^.^'-/^fs^^V:^^^^^ ^. 

21, Preferably, low pass filtering ±s Jxse&t^ 

lating the frequency space components ^dm?i3iifS^ 
mapping. The magnitude components beloiigihg^'tor very-. ' v 
35 * . low or high frequencies are not mapped; vc^hei^fdE^ 

modulation is only applied to components : in medi^uiti^^^^^^ 
frequency range. 
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22 . Select the- magnitude Gomponertts vin/Tth^ or 
log^log. coordinate system* to be :modulkted:': Typically , 
about 0.1-0.3% of all components'are to be- modu- - 
lated . The RST or PST pattern- T ormed-; by^^tfie s 
lected components- in log-polar or: Ipg-ldg'-^^^^^^ 
should be such that its auto-GOj^latrioii^/^urider ^trahs- 
, lation is weak/ For this - purposer;^. the-rTihdiic^^s'^' 
selected components should be.;:Goprime'-or^^be;Mferiv^ 
from . a two-dimensional random sequence • -This 'random 
■ ' sequence can be generated by a ' xandom> gehera^^ 
seeded by a key K> -whoever -knbws 'thiST^k^y^^^^^^ be 
able to reconstruct the • templatei^^and^^d^feifclr^ wa- 
termark a;s explained below. Each' .seleefeed/G^^^^ 
is increased by a given value ^x*;^- ^ *^^- ^^^^^^^^ - • 
23. Map the modulated points ^by cihange/of, cpdrxi 

■ back into frequency space*(invierTS'e>;i^^ V 
'Or inverse log-log metgp^xiq) v\ 

The RST \or PST_ pattern^ T • formed^ fcy th!^',^s:^l^(t:t:^d^^ ■ v 

nents in lQg-i?polar respect ively^^lbg^ 
^ f ined and Joiown^ to . tS(e.. Reader - ofr ih^^'^^ . 
It must, be noted thatJthe Galcui^3:oh&of /tSaeM^e^ 
respectively •log.-log tfansf orm<of:,^the^>cpve^r-^ 
vide5.:vframe is^; not/regiired -.f or., gienerat^^ - 
Instead,, the :RST oi^ST-i^attern^T of^?.the*comp^ be'^'v . 

modulated in log-polar respectively^ ro#-lGig;SE^ be 
mapped back to frequency space, whichl^-i^esui^^^ or ■ 

PST pattern -T' ' in f requencyr'space::^t:haiv:ckji|^^l^^ di- : 
rectly to . (e.g.- added to) "tfie:^t:6rn^oiidihts^: dih^^ 
space.r Alternatively, . the-- ternplate.'C^.>^b^"'ac^^ 
in. the. Fourier transform domain. ^ .'^i'^^^^J^i^'^tyi 
As will ;be explained below, the;^^ ten^lMe 
for: n'oh-obrivious watermarking . 

III . d) . Extracting .the watermark^f rtjm^^stihe^^^ te^^^^^ 

video ■■ ; ^ \ .V ■ : : :\.:^ >■ '^K^: -i'-:^:.' ^n':j:i:i^y'J:.^thbc^i' 



• the;t^ terr^lMe ^':isf|iiG^ *' , 

:ing.'>. v:S;: Y ■ - / 'V' 
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Figure 6 shows a detailed diagram illustrating = the steps 
for reading a watermark from the st ego -image or ^.stego 
video frame: !' 

31. If the image is a color image then compute the liimi- 

5 nance component and use these values forrthe .follow-^ ' 

ing calculations. " ■ 

32. If predefined block size (Nb) is used, divide: the: 

. image into adjacent blocks of size Nb- x Ny. (e.g. 128 x; = 
128 pixels) Otherwise Nb = min (height,,. - width);;. 
10 33. Map the image luminance levels ,(or gray. :leyels) to ^■ 
the perceptually ''flat" domain . by -replacing: them 
with their logarithm. - /J^i, 

34. For. each block compute the FFT. * ; .i:^: 

35. Use a data windowing process • to suppress the edge 

15 effects in the magnitude spectrum ':due. to .possible v.^ 

.rotation or scaling of the image. Diffiere^^^ 
can be used such as Blackman, .Hainming<;r>^:H^ . 
Welch or Bartlett Window ( see^- W.H.> Pressv : S*. A, Teu- : 
kolsky, W.T. Vetterling., 'and B.P'/- Flanneryv*;'^ 
20 . : \-.;cal ReciE)eS:"dn C^., Cambridgf Universi-tyi/i>ress, ; sec-^ 
ond^ edition, 41992;) . ;:The :ef f ect of f^data,: windpw;i 
the .-space domalh is equivalent:; to; jcohyoiu^ 
' -: frequency domain with a narrow ^^r3iter.^*^The^^ 
effect introduced by this convolution. :^is># 
25 - : becaAise it tend^ 'to- smooth :.the ;spedtriim'-:>wi^ 
interpt).lation moire effective.-. ' 
36 .; Determine the rotation and scaling * that:: they^ii^ 
suffered .by finding the RST template vin ;log^^^^^ 
• -space or .determine the liorizontal> and: ;vferificiai^^ 
30 ing by finding the PST .template in;,:theyl:og-.Iog ^t'- 

space. These steps are described below ^in%^ 
the template" section. . ; v - : v 5:^^^^^ 

37. Using the results of step 35, read the^mpdiilated 
components to generate message m7 ; This'^requi^^^ 
35 * V. knowledge of the method: that was lised in is t^^gfeS^if^ 
selecting the components to be modulated V- ^; a v^r^^? 
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Once that the message m' is recovered, it:vis'^;demodulated 
and error corrected using the, methods .described;.ln sec^ 
tions III. a) and Ill.b) . - ^: / 

5 Finding the template : 

The steps for finding, the template ^-eviilustrated in . " 

40. Apply log-polar or log-log! mapping v.to:^tiie;^rvagnitude 
components ;of. the.: Fourier; transform ::>^Thei^ 

10 components belonging to very>>lowvor;%igh frequencies^ 

are not mapped . The . following ana^Lysis ^iis:i:c>na.y ap- 
plied , to components in mediiim .Jreqraen^^ or to 

all components except the low ; frequency ^-^ 

41. For oblivious watermarking, calciiaatej^the-^hprmal^^ 
15 ;cross correlation of the> Gomponehts;.i;inu?l^ 

log-log space with . the RST" or^^ST ^atteerm^T^::that :was ' 
used for generating 'the temp£a-te in^fstep 2f^.a 
the point of best . Gorrelationci;^.jl#:;'^t^ 
ther vbeen rotated or scaledv^ .this ^?ointn^Si;^^^ 
20 : If the i^gia^e .is rotated :an^/Q^ 

is^ an; ' of f set a^ng the/,^.a^ 

the^ log-polar^^inapv ;;If the ,^ca3png-4suf fere J 
image, or video frame, was :.diff;er^en%,on:^^ 
. -i^espec:tivefiy vertical, axisv cMierevifar^^ albng 
25 . log-x ^respecfrf?*^ly:/JLog-.y;;. a^^ 

For noh-oblivioUs ".wat^rmarking^v 
spectively log-log ;.transform\ of 
nents,,bf the cover- image; QSLn!^^^sei6^ 
or PST pattern T for retrievingf^sc^^iM^!;^^^ 
30 respectively change of proportix>ri:i^ $:B: x:r^i: -5 

The cross correlation Cctn be-ic^feulajt^^^^tf^ 
using conventional Fourier :.techiidiquesf:p^^ . 

- In order to obtain bett^ri^iresuoit^Ja^ 

computational, cost, before, applying; thetcross^cpor 
35 ^ one can . ; f ir s t adapt ively f iltfer . thei::data;>tO£^^^^ h 
liers. and. noise and use a filter^. whicfekeepi^^cini^^^ 
peaks, this can e.g. be carried out by locally!.! ealc^ 



wo 99/17536 



^PGt/Ifi98/6\500 



ing the variance (or - some other value indicative' of the , 
data's distribution) of neighbouring data of -each-^ data- 
point . If a given data point lies clearlV outside this- 
variance, is it replaced by zero. In a next ''step,.' local 
5 peaks that have not been filtered' out are* then' "s tor ed^in 
a sparse matrix to reduce computation..^*^ The fast correla- 
tion (using the FFT or by a point by point correTat 
is. done in this case between the peaks of (T) -and ;the^^ 
peaks of (T'). The correlation can moreover be, Weigh^^ 

10 so that the -more reliable central- points^ar^ more . - - 
strongly weighted. > . j.r^ a: 

It -is possible to further .increase^ accuracy 
of the scaling and rotation factbrs byycarrying^^oM^^ 
following: detecting a scaling and/or rotation Vinf-a -fir 

15 iteration from the correlation between the- log-:pblar ;fer 
log-log transform and , the template, -musing, said^^^ba^^^^^ 
and/or rotation- for either^ a) scaling and/or or^^^ 
said Fourier transform, calculating, a SGaled-'ahd^^^^^ 
tated logrlog, or log-polar transform ■^the!j?efroIt^^ 

20 lating, said -xofeat^d log-log or lotg-igplar- trans^^^ '--^ 
said template, or -b.) calculating a -secd^^ 
scaling :^and/or^ rotating an original^ ^Fourier^ 
plate.: and calculating a log- log and or ■ log^po^l^ ; ' 

form thferefrom^ and' using: said second ^templateV.fpr^%a^ 

25 lation a .second corrSlatiori with said Jl^dg-iog^-b^^^ . 
polar transfbrm of said stego data ^^.i. vH:^^^j^^ ; , . 

. • . ■ : : ■ ■ . ''^i^c^'^^fP'y-^ . 

Ili.e) Embedding watermarks in small and /or ^irr^^&^ 

blocks "-'r. 
30 . . ■ vy •;:^./y^;l/v.?^:,^4^,.;s#ii-^^^^^ 

To , embed watermark in small blodks-v bhte^comp 
trans form .over regions that ins tead of ^cdmpr 1 s ihgH^^ 
one block, ^.extend over adjacent blocks i -Tofidoftt:^ 
can . use . the Lapped Orthogonal Trans for1ti ' ( see'-H . S 1" " Maivar > 
35 >Signai Processing with Lapped Trcihs forms ''V N6rwc>od> "-'il^ 
199i ). which :has the advantage to minimize^bl^bcKingPef 
fects which. would otherwise make a strong^ Wat eimar)^^^ 
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on blocks visible, especially f or ; smalL. blpck;. sizes 
is followed by the method as-_described;- i-m;.III-i^ 
III . d, where . the. Fourier trans formation.: phas.e .is replaced 
by the Lapped Orthogonal .Trans form , (LOT ) , applicat ion.> f or 
5 the cover image, while keeping the .same template- opera- 
tions. . 't^.. . ...V . ." ' 

Using small blocks, (of roughly 16; by : 16, point Sy).:; allows- 
the strength of the embedded, message, to be/imoduiat'ed as a 
function of the local variance, ; which renders k the' method . 

10 adaptive. Furthermore the watermark, can .be;^:^reGpyered lo- ^iv^^ 
cally the only requirement being that/ a>- sufficient. -.mumbe^ 
of blocks are .available, to contain.vl -.comptete^me^ 
To embed watermark in blocks with 'irregular-i^^ 
(non-sq\aare and non-rectangular) such.:asi;might\fOCcuf i ih^ 

15 MPEG4 video compression, two possible., solutions.: can^^vbe.." m 

applied:. . ^ . . . 

• padding of the irregular: blpcks/ in. .order;;: :tp//ob^^^^ 
^ square blocks, using either const^tr^paddihigVjLR^ 

metrical padding, ■ then methpd^as :i;n; III .^-.andiVjII;;;^^^^ 
20 •. - ayoid the- i^adding ■ pha^ by, d%ec^ii^.usi^ -rvr 
... transforms of "^bflr^y'^ ^ 

nard, .Image and MUdeb Coding ..Ug^pg^i^^ 
■ tion,;.CIPr:Gegevens^ /Koninkliijke ^iS^fli^M^^^^ . = 

19-94) . . This: is follc^ed by the - mejthod^a^ ' , 

25 III. c and Ill.d; %Here ,the:vFpur;Ler3?,tra:h^^ 

phase is^ replaced by the JWavele^^^ Triansf orka^ or>^:5. 

the cover image, while keeping the same teiriE^^^^ 

erations . " " . , _ ^^,v: uXSv^^£p:,^ i<.:L,.li ' , 

30 Ill.f) Watermark detection without extraetiori':;: ' f"'. 

Being able to detect,, a watemark^it 
able to decode it is useful and . in.rmahy cks^es-v^^^ 
to prove the identity of the generatorr.of i^the.'^Water^^ 
35 ' This can be done by a Bayesi^n ;apprpach.-(:Se^^c^ 
anaidh and W.J. Fitzgerald,. '^Nvjonerical ?Baye"sian4^^^ 
Applied .tO vSignal Processing" , Series pn^St^t^its^ 
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Computing, Springer-Verlag, 1996) that allows to compute 
the probability that a watermark generated by- a^given; key 
is present in the stego-image, relatively to the prob- 
ability that no watermark was generated with that* key. 
5 The implementation of this principle operates 

as follows. The used watermark d is a . J^n^ 
of pseudo-random sequences corrupted by noise : u ^'- - 

d«Gb + e - > - 

10 • ■ . . ■ ■•' ' •'■ ' ' ' ■ - - ^ - ^ ■ . 

where e is a noise vector corrupting the'^'watenhB;rk;/b is 
an M X 1 vector and G is' an N x M. matrix of 'bit is * in form 
+ 1 and -1 (due to the isomorphism between ' the ^^roiip (ex ■ . 
elusive OR/ {0,1}) and { * , { 1 , -1 } ) 0 was ' 'changed -t 6 -i ■ and 1 

15 to -1). Each column of G is a pseudo-^random se'(iue^^ 

as an m-sequences or a. Gold Code in>which^6 ' 
to 1 -and .l-'to --l. • - ' . -^Z:- ■ .^i;.^ 

• If we assume that the noise' foMows; a 
distribution; : the probability that ^a messa:g;e/bf-''lengt^^^^ 

20 was embedded: with a said -key k in the ■^stegd-inlage ■ (SCr 

irs': , " . . ^ • *. 

• ■ . ^.^ ;r-'^^^r(M/2)n(N^M)/2)d^t(G^(S^ '- 

where F is the gamma function, R. and R„ are' irreleyaLnt 
constants introduced as norTnaliziatibri .f actpri5,-^:>^^^^ 



. b = (G''G)7?GTd: - 

and J i ^ 

. ■ ■ ■ f=G^b- 

. The probability that ho message . was, embedded.-, wi^^^^^ 
sai<5. 3cey' ic' in the stego-lmage (SD) is . 



p(ik,0ld,5/) 



oc 



1R„ (d^d)"" 
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Finally, we compute the relative log-probabilLtY: i . 

p(^.Mid.5/) , ; 

pOk.Old.S/)/ 
and compare with 0. - 

Ill.g) Watermarking, without template 

Using a combination of Fourier transform and a log- 
polar map, i.e. the, FoUrier-Mellin.. transform, th^ 
Fourier transform of a. log-polar , map,...; allows^,^^^^ 
watermark in a domain that is. invariant to, .rotatipn/ 
scale ami translation, without the^^need:. to^ use ;a ..template 
to detect rotations and. scaling, The^-method^^^^^^^ of r.- 

directly transf orming the .coyei^-image, xOfc;is video;, frame v-^ 
the log -polar domain; the watermar£ is . direcit^^^^^^^ 
at t^is stage. .Figure, 8 . slipws , the,!^^^ 

the watermark, in| a^ rotaj-ion^ .s^aiei.and .feranslafei^nraji^^^^ • 
variant domain> . .^.^^y-^-''^^. ...y-:...... 

An alternative whlch'^;ls >ompu^^^^ . 
.bypasses the mapping o^. the .original amage^^ 
in tl^e rotation;- scale. -a^d transjlatio^ 

This is shown in Figure '.'9 . The scheme :to extract .-the wa- .:■ 

termark f?rom the image is shown in .Figure 10 i ' 

Replacing the 1 pg -polar mapping ioy 'th^A^ 
ping allows to embed a wateniiark in . a domain , th^^ , 
variant to translation, horizontal and verticai scaling. 

This is an idealized watermarking schane , which, works 
in principle but which in practice is quite - coistiy arid:^ 
difficult to implement. The first difficulty .is,;^ 
the log-polar mapping (LPM) and the inverse ; lo^r-polar ,. 
mapping (ILPM) can . cause a loss of . iinage 
..change ^f^ coordinate ' system means :tl^^^ 
terpolation must be us^d. This leads^ tbra sS^ 
culty, which is rather numerical. Interpolati6n; only per- " ' 
forms well if the neighboring samples^ are ^of th^ xs^ 
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scale, which is not verified by the magnitudes of -the \ 
frequency components. ■ r- - ' 

Ill.h) Watermarking videos 

In the case of uncompresjs^^ video. Jeach. frame; 
is marked. One possibility is to use the same; key and the / 
same watermark in each frame. Howeverythis'^cah'-d^^^ 
the robustness of the watermark against forgery /"rThere- 

10 fore, it is preferable to use the same key, ' but a differ- • 
ent watermark for each frame {e .g, "the r^^l'of JtHe ' 
followed by the frame number) . In the 'case 'of MPEGI- or . 
MPEG2 compressed video, only the intraf rames- I - ( fehfe ' f £^ 
frame of each '.group of pictures) . are mairkedv ^'='^^7;^^ : 

15 Another novel alternative foi^-wa^^^arkih^^^ 

uncompressed video is ^ to individualiy^v ;nia3?k^^^^^ ,ii "^If ' ; . ^ 

dimensional spatio temporal - blocks of / video'; str.0'^^ which 
may be : over lapped in time and/or in/sp^ice.-'f^ ;^ 
used. herei,is. an; extension of the' algorithm^^^^us:e^^^^ 

20 imsLgek to the temporal dimension>: using j 3b. :^<S£tir5i^;^e^!¥:f ; i-;^ ; 
"Cransform, 3D template\,.and the " same- spiread spec t^^ 
techniques; to generate the watermark. :.^he' \ise: -c^f^^^ourier. " 
transform ensures the same rotation, " scaling, *■ arid; ^^^-^^^^^ 
portion ihvariances . ,We 'have also - a. full :invaricLn£^ . 

25 termark for theses Slocks, exactly as ,f ort2tf^st^Ml^^^^ 
watermarking. These 3D blocks may be ratheii^ ^^l^3r®^e/:^^ 
small enough to ensure, more robustness agains-t^:'§rp 
As for individual frame marking, we can usefytfieiws^ 
termark for all blocks, or a dif feirent wafeisrThat^^ 

30 each block. The advantage of this spati'O- teibpor^aS^ 

proach is to take in account the motion ■;andrf^s^ei^ev^a^ 
tion in watennarking, as developped xn^ tix^Jipa^ 
. Swans on, vB.^SZhu and A^H. Tewf ik, : "MuitirefisSSSit^^ 
Based Video ^ Watermarking using Percept^al^^lcMeis^y 

35 Jbumal on Selected Areas in Commuhi^atioiis^'v^Sl^ 
4, May 19!58. ^ However, in contrast 'witii^du^ilg^ 
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they make use of ID temporal wavelets;:.. -;transf onn ■-instead 
of our 3D Fourier transform, . J- ■ . 



IV. Properties of the watermark: 

In the following, some of; ;the ^properties of 
the watermark, generated using, the .steps . described-above 
are ■ discussed. • - - v: v. ^ *- V- :^, 

Resistance to -cropping:- "\-^:i$::.]:ri;r'i''''' 
' One feature of translation /dnvstriants 

oped using the Fourier transform is .that. vthey.^a^^^ invari- 
ant to circular translations (or cycOric- vshif tts^) J:^This-is ' 
used to construct watermarks that :.are?:inyariiaht to . crop- : 
ping. This • is .illustrated by. refeiffence:^ii^Q^^ 
■-■12.; • . • • ■ , 

Kb mentioned above,, the -image^i^^^ 
blocks and. the watermark is appflied-^fcO:>eacheblockV In. 
oth^r^ Words, <t:^e' same .mpdulatioii:p|ut:t^!er ^is^^applied^.^.to .. ■ U 
'-t^e Fouj^ier' componen£^..of each ^blcHcJ^;^ 
tion pattern is given :by the corresponding ^e^^ 
sages m,. ■■ , : ; 

/ , Fig. 11 shQws.-such. an dmage.:wher;ev;t:h^^ 
lines 100 designate nthe borders between the blc^cks^^^^^^^^^ 
pose that tihe watermark: in a standard^'^size ;blodk^^^^ 
of the form: ■ ■ • C-v-v r; ^W-lN^V^V' ' "•i.. 

where the sub-matrices; :A,7;rB:; iQ^^ahd^^Di^^re^iibf 
arbitrary- size. A circular translation ^of^^suelit^aiwafeerr ^: 
mark is of the form: . . ^ : ^ ^ 

■ S=[D.C ; B- A] . ■ -^.tX^^ ^^-S^ 

i. : • ' .; The .original s t ego- image ci^ til^^XiM^ " 
marks in the pattern . [T- T TT:; T;iT..-T-T^ ;Tv^Tr^T- T)" ^^^^ 
fore, a cropped section: of the :matrix>:wiilucar;ryiaviwal:er-^ : 
mafk.in the form- DS S S S ; ; S S :S S v^QS.^S S; S^^^Tliis * is 
illustrated in Figure 12 . When reading-- the- 'Wateritia^k- of 
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the cropped image of Fig. 12, each bidck^carries th^^; wa- 
termark- S. Since S is a circular transf orm of '^T/Ht can 
be read without problems in the Fourier domain^ using the 
steps outlined above. 
5 Note, however, . that the cover^ image^vi-i^ ; 

tiled, only the watermark is. Therefl^e, wHife cropping 
merely induces a circular translatiori;*bf ^ the'^ W^^^ 
each block, the change of image in- each block- isl'iiSt' a * 
circular translation. To compensate for thisy ^the -pii^se 

10 components Pi of the Fourier transform must .be,, uiSed for, ■.-• 
correcting the sign of the modulation ^'df ; the^."m^ 
components - Mi, as it is outlined under step "5^^;^^ 
• The optimum size of block depends^^6n 
of dif ferents factors . A size that ds . a p6wetS^f. )tw6*^^ 

15 useful because the EFT can be used:;' The ' bdJocj^^^ 
must be small enough, to withstand cropping bti't:^^^^ 
enough to comfortably contain a watefitiark. 'The' iSest -com-- 
r-promise./'f or block ;si2e is 128 .■ ■ ■ '0 ^* - . ' ^'r^: vf.{^ ' 

20 V ^ :..v:Besistan<:^ - to scaling and' rotation : : ^ '-^^ 
. ' ^As mentio^edv above re 
in log-tpolar space 'allows to detect ^andvme'asur^^^^ 
ihg and/or rotation that was applied ^to -the ^^n&ge^ 
information can then be used for readihgp itHe;^wat^^ 

25 Since the reader knows the pattern that was used for ' 
modulating^ the magnitude components in 'step ' 5, ^^^'^^^ 
identify the modulated components in -thev scaled ro- „ 
tated image and derive the message xa'v thereof rom/-,'^A^^^ 
ternative is ' to compensate the trans f onnaftibrf^ 

30 measured, rotation and scaling and read the^'messag^^^^^^ 

compensated image. ■ ■tB^i\>f^>'-0^y-,^ \\. 

Note that the apparatus :d6es4^ofe^ei^^ 
use a rotation and scale invariant watermark)Butg^^ 
searches the parameter space, of rotatioh#'*SSid'^*^^ : 

35 Since searching:^. the space of ^ rotation^ anii^lcalW^ ■ - 

frequencyvror space domain is quite' coiripl^Gat<§^^ 
described in the WO 96/36163 ) ^ the log-pdiSii^'^^ 
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Where these parameters are Cartesian coordinates. :and.' can 
be searched using efficient' correlation... technrques:; . 
Resistance to change in aspect ratio: . . ; . . 

Similarly as above, reading the PST. template 
in log-log space allows to detect and measure the hofi-... 
zontal and vertical scaling that^^a|vappiie^( to the dm^ 
age, or . video frame. This information, can .then. /be .used to 
compensate . the transformation,, which the. :allQwsj the- wa- 
termark -to be read. ... . 



The use of the log-polar ma^ {I!.p6> 
map. (LLM) changes depending, on:. whet:her..the;:watem^^ 
inserted block- by block of predef ined.size. in- the^ FFT do- 
main or whether the block size depends; on; thel^image- sirz^ 
15 In the first case, the LPM or -LLM as ,used,:tpide:tect -scale 
changes in the image., In the ladtei-^vcase^ ^the,^^^ 
.used .to detect the ratio between .th^vvFPT M-2e..Msed.^in.-em- 
bedding (which is unknown since t% original-; image 
is unknown in oblivious waterrriarking) and -the FFT size 
used, in extraction, which equalsi..t^^ 
.-^ich. we. attempt "tp ■ e^trac 
tant in cases, where^' the image siz^^ha^Cc^^^^ 
suit of e.g.. -cropping or rotation since; the-:xela^^ 
sitidns of ^the ^ FFT points change.. . >:7V f^ehjW. ^ 

25 ^ ' , , ' ^ y / \^ 

Lossy Compression: . s. , . -'..^.-j^-.:^,; 

The robustness , of .the waterinark.M:tc> :oj^ira^t^^^ 
such, as lossy compression is achi eyed;> by using 
tually . adaptive spread spectrum communicatipns-.aj>pr^ 
in which a spread spectrum signal is:. embedd^^^iin^^^ 
components of the magnitude spectrum pf x^the : EQux^ra;:^^::^^ 
Transform of the image. . \, ..v " 



. . : Redundancy-:, . . .■ . . - . • xHa...,;.,^^,,.-.- 
^ 'The; watermark is ; enODed^^ 

fixfed size with exactly the. same^.v^termark:emb^ 
each t^lpqk.^^This means that, the watermarkri^aii:^)^^^ 
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ered from a single block only . This leads :to a redundancy 
that increases the chance of extracting the-watermarkv/ . : ^ 
correctly from more than one block. • ^ 

5 V. Siimmary . , r ,x V ;-- * -'^ ~ ;^ 

The f ollowing summarizes some.'^of ;the^prdper-^ ■ 
ties of . the preferred embodiments of the, inyention;..jK^^ 

The. use of. an asymmetric cryptograpihsb^ ^ ' . > 

10 pair for the seed generation enables the; exe^iit^ 
asymmetric key. agreement protocols--.with^ 
or appendix, and the protection of the vcommunicia^ 
tween the involved parties . Different securi^ty^fsf^^ 
for the .' communication, such as mutual, aiitheritife:-^ 
15 tegrity,. confidentiality and non-repudiatioiiv;.^ 

ported by .the. system with one .asypp^trie j^fi^to^^ . f 

. key pair of the watermark author only -/for >a,^,reigi.^ 
^'^ or trading proces^s : 

^ , -The , present techniquev enables -a;^^^^ 
20 ingVr^ation .b^|:rween the. image IDr,^fh^4iniagi^^,^an^^^ 
drf- the- .regiatersi hiis. cppyriglit at;;;|i^^^;^^ 
is watermarked, later^ by^ an unauthpgirzeC-p^r^^ :^.;^r:;^ r^ vr^l " i 

stamp, in . :the ^copyright certificates resol\res;;cjfehi^ .^v; >^ v ; 

right ■"ownership;, -'-^ ' * ■ . ■ 

25 .;^:The CH dofes not have to -re^ediM(b^s^0h^s^ 

cryptographic: key if ownership : verif iicat^iorS^as^tp}^^ : !^ ^'^1^ 

plied by ..a. different legal party. ^ '^-'- '^'^->-^A^^ 

The present , technique supporlzs^i^^ir 
copyrights.. copyright is trans ferir^df^tO/^^^^^^^^^ ^:lL^-vV..{y,:}^ 
30 party, corresponding copyright revoGationKqert^^^ . \ v.:': ■■.'-'j 

may be-- generated.- v\^t3t:^v:^i^ 

Digital signatures techniques-iaMi^a^^!^^ v . ^ 

the security of the communication between ;:dd^ff^i^ 
ties and the vauthentication. data embeddedc^in a pr 
35 public watermark of an. image or videos :^No::^s!i^a^^ 

beling techniques^ of , the complete imageKdrl^idei^aaSfeS^ . 
plied by. the. .sys.tem. . ■ 
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•In addition, origiriality-prbte'ctiori and' image 
content protection by ciphering/deciphefing; in the ' t 
form domain is supported. r,: r^l^ , . . v;,;:,. 

The Fourier Mellin transf orm^- is 'the Fourieir 
5 Transform of a log-polar map. It yai:>IbWs to ^dbed . a wstr. ' 
termark in a domain that is invari^t to rotation, scale 
and -translation.* However this approach is^Tcostly and^dif- 
ficult-to implement, and* therefore ^rt • ha^ been -e^^ ; 
by combining with a Fourier Trans f orifh basfed template 'em- 
10 bedding technique. : : .-^s.. : ■. 'r^- 

In the present inveiition^^-^her^g^al^ 
of a .Fourier transform is used- a:s- a^-means-^df^^^^^ • 
rotation and scaling ihvariance . -In dfdeir ^ to be Hrival^lant 
to scaling: and change of proportion,- the ^16g;-l^ 
15 the Fourier transform is also used: ' ' ^ ■ * 

Circular translation:^^ a 
means of constructing digital watel^arks^^M 
ant to cropping. " :c 

\ In contrast to some* khowri^^^tee^ the 
20 -present sys%tin-^does. npt require;];&|E^^ 
.- .marks that: vere V^ve^ <^mb 

Information is embedd^d^j^iahd/:^ ±n 
the log-polar or log -log domain df^: the:: Fbiii^e^^ 
Fre(5uency components are.^ modulated whichl^g^^piiivfouff to 
25 the cover image -bu^^whibh al^so have;, the t>r^pe^ that 
they form-^an unambiguous Jion-repeatda patt^ernl^ 
polar respectively log-log space.- They aie^'WeS^ 
termining the degree of rotation aiid-scailSig. r^^ 
the change of proportion sdf f ered; l^y:^;a-s^t^^ 
absence of the = cover- image', Copr^rne>^£if(ec^einc: 
ful for generating such a pattern or t^iipisty^Mii3:^6i^ 
random . sampling of log-polar or -lbg-%^'^]^^ 

method that-.can be^ applied:. : .--v.. ^ ■ 

The technique applies- a^ 1ieW^^cbhxfept£^^ . 
Afariants which eliminate tfi^-needwf dr? e3^^ieifel|r^^ 
ing^ for rotation and/or scaling val'iifesi^^^<>iEb|'^ --^a - 
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The methods descr ibed , above . can; t>e incorpo- ^ 
rated into an apparatus, such as one or more; computers, - 
using know programming and hard,ware. teGhniques . , T^^ 
the feasibility of the approach, a; Java ;.bas^ci:;db^^ 
protection and authentication environment f or .digitai''rim- 
ages has been implemented. The PKI,,- th^CH,^. th^^^ 
the IB application processes all; impleme^ntjalcGra^ 
User Interface and a server,- suppor^;ing>both;.consoie us--^ 
e;rs and other requests through, a. socket Anteyfj^^ - 

While there are shown and^ describe^ 
preferred .embodiments -of tlie invent ion^^t^it.,|^ 
tinctly understood that , the inventipn-vi^Svjno 
thereto , but may be otherwise variously^^jen^ 
ticed within the. scope of the following ?vciati^ "^n:^-:'^ 
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Claims 
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1. A method for generating =arid transmit ting a 
data set between two parties H and B comprising' the is teps 
of 

a) providing a cover dafea set, (GD) corre- 
sponding to the data set to be transmitted,:- • 

b) generating' a stego data set (SD)* of said 
cover data set (CD) by embedding at least one digital wa- 
temark in said cover data set (CD) , where^M said water- ' 
mark is encoded using at least one key" of- aii*:- asymmetric 
cryptographic key pair (psH/ vsh)- of : Hv said*''key-^:pair^^^^^^ 
comprising a secret private key (psn) and. a known :'public 
key (vsh) derived therefrom, 

c) encrypting said stego data set (SD) using 
said, key pair {ps^, .vsh) of H, \ . . 

d) transmitting said. . encrypted stego data set 
from said party H to said party B. • 1 : 



20 " , 2,. The method of cl:«.im:^;:l, wherein said step ' 

-c) comprisefs - A 

generating a mask meagage. (B | | SN) , = . . . 
generating a signature (DSSMRqIpshv B| |SN)^^^^ 
of said mask message (*B| J.SN) using said, secret .private- 
25 key (psh) , and ' ' , 

■ using said signature, of said, mask" messatfe -for 
seeding an encryption algorithm f or.*:said ;Steg;pv <iata set 
(SD) . • . . 

30 3. The method of claim 2 .wherein [iaid signa- ^ ' 

ture (DSSMRg(psh, B||SN)) of said mask messa^ib'- {B | | SN) 
is transmitted from H to B. 
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4 . The method of one of the. claims 2 or^ 3- > 
wherein said encryption algorithm comprises the step of 
calculating the Fourier transform of said stego data set 
(SD) , modifying the phase components of the Fourier 
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transform using a pseudo-random pattern , seeded by -^said . /. \ * : 

signature (DSSMRg{psh/ B| |SN) ) ...Gf said^maskcmessage'- - ■ ''^^^ 

(B| |SN) and calculating the inverse Four ier; ,transf o-^ 

generating the encrypted stego data set . ; ; : ' ^ V \ '. -^i^ - : 

, 5. The method of one .Gf'.;.th€^. pr^c 
wherein said key pair (psh. vsh)- ofv^- ^^is^jaii^^^ 
curve' key pair.. * ' ^i'^Jv;' 'V-^'^ ^ 

10 6. The method of one of the prec:^34^ng[T^ 

wherein,, said step; b) further comprisesv:t^eJ.;^^ 
generating at least a f irst ;wate2fmark^;^.^whei^e$m^ 
watermark is encoded using said' priyate^^'-key^^ii^ 



30 



The 'method .of claim :';ft^^^wh^ 
encoded . usang:--a: ;hash,,ya'ii(^j(^ 



15 

.7 

, watermar;k.:,is 

said private key {psy) and 
hash value (crh(psH) ) • 

s 8 . V Thet- met%qd of cl^aimitSj^^ 
watermark v is encode^v.using ; a , hasti 
signature:;. (OABq^^ using.. 




25 : 9 . The method of ^ 6he of ^ the^ 

wherein, saiH step.-b) ^ further copprises:^^ 
ating. at , leastr; one . s,eepnd/watem 
watermark comprises a payload .(pchIAmI 




Fourier .;transforTn of said stego 



. ;da^a:i.(5D)gg^^ 



i .:'.l-0. The method- of- one /bfr'rtMe^:^ 
wherein said step b) comprises ;the^'steps ■o£:v^'vS'^v;t'>v 

^i) providing a message;, (si,.- S2■7'::l:v.;5^;^^ 
be . trcinsmi tted - in: .said at least: one ■■ waterfnarkv;;;^^ 
35 *sage consisting, of ..a. plurality.' of \symbol's0fe;li^^^ 
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ii) providing a pseudb random ge'nerator - 
seeded with a seed value derived f rbm -at'-least brie* key of 
said key pair (psH, vsh) of H or a\ha^sh Value '^thereof;' 

iii) encoding said message using vMues- from 
5 said pseudo random generator 

iv) using the said ' enciidied message (m) for 
embedding said waterTtiark, ' - ^ 

11. The method of claim 10 wherein, said step 
10 iii) comprises: V: 

for each of said symbols (3^)^ ^eheratiri^-^ 
pseudo random sequence of . numbers -{v^ v-V2 / ' . by a said 
pseudo random generator, / 

using the value of each said symbols (si) for 
15 selecting a sub-sequence within said pseudb rahdbm se- 
quence for forming a symbol vector^^xi) ; 

adding said symbol vectbrs- '( - to ^^gener^te 
said encoded message (m) , 1 ' • -v: ;:m v ; • < - - v' 

2^ - V ^ ' ^ m^etho^ of 5^i#>ll comprising ' the ^ ' 

--foliowipg stepjs fpr .%cbding^^^4id:^^ i : / 

extracting a read^otit;i?me%^a§^^^ 
watermark, said, read-out message^ b^ing^^a^^vSc 
the %amB length, ^ if /er^sejd elements are' 
25 as ■■said'..symbol^veGtbrs '.,.r^- r.-:: ^^i- 

" generatihg:.:all possible ^^ktues:,lf#^M^ . 
vectors (xi ) - using said pseudo ^r^dom^^gr^h^i^ . : 

-with said- seed, and^ - '.^--'--H.^^ e^S:,- J.^-!^i^ovs.,^;*3x^?^ 

" calculatinig the cr^ss^^cbirrfelitibh^l^ 
30 said pseudo random sequences, of numbers (v^;; Vv^^^:lr::v 
said read-out message (mM for;^xetrievS^^ 

' ' 13.' The method of claim'^lO-^Whirein sMd-^^ 

35 * iii)^ ■ comprises^r ' ■ ' ■ ■ ' - -^v ■■■hlir^^x^0<jdk^ '^^^.y^'. , --^v 

for , each bit (bj ) of said symbol s^qtiehce 
(si, S2. . . , , s^) , deriving pseudo rahdom; Agactqir^|^ . / 
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having elements 1 or -1 from a said pseudb. random genera- 
tor, which pseudo random , generator preferably generates ^ 
m-rsequences or Gold codes, and • . , v, , -i^; v, . vV/* ; 

depending on the value of . said ,bit . (.b^) mul- 
5 tiplying said pseudo random vector (rj*) with +:l%:p^ -i to; 
generate a modified pseudo random vec^pr.,j;cuad .adding said 
modified pseudo random vectors to /generate:: an:. eiicod^edV' 
message (m) . * - - 6":^ --^ 

10 14. The method of claim. 13 comprising;- the- . 

following, steps', for. decoding said ^^message^:v. ^- ' ^ 
extracting a read-out message ::(m' );. from^ 
watermark', -'--^^-^-s- -r"^-- 

. .deriving said pseudo random, vectors f(s^^ 
15 from said, pseudo. random generator' seeded.With 'a,^^^^^^^ -^y 

seed, and : , - - ■ " ' ■ 'fi^:^^^''^^^'^?^'-^ " 

calculating the. cross correlatioH^^^^ 

^ each of. said pseudo random vectors^ <rj':*;)v:,andc|s'iMi^^ 

out message, (in') for retrieving ^^'the.cpri^es^nd^^ 
20 (b of the;.:: j ^ai^^^ sequence (s5^.>;:;.:S2l^:V- c-V -^j^^^ ^ ;i 

.. .15. The^-xnetliod' of vGne;;qi\^^^ 
'wher:ein .therpbsition of c6mp6nents^:tG^:?^tee mcyc^ 
each ^;a\Lue:..pf . the' ^^ncodfed message -(m).r- ls;?-;g^^^ 
25 pseudo . random : genera^r s'eeded ;by av key^- kiiovra^!;b H; 
and.B. . ' . ■ _ : ^^J'^tv 

: 16. The method of one of ■ ,the preiceding^^^^^ 
comprising the, step of encoding, a message ^ore be i^ 
30 bedded in, said watermark by, using symbol bksed^-jReied'^^ 
mon codes:v as error, control, codes. . :----l^r::::^'\i,:'l^-ii'r^^<i^ 



17. The method of one of the pr^ceddMg 
wherein, said- step b). further comprisesv the^step':of :calcu- ^: |- ' , 
35 ^lating a- logarithm of. said cover data: :set% {i(i:b?)^ . j 

bedding said watermark for embedding .said . watenrtafk^^^^^ 
perceptually flat domain. ' i :. ' V 
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18. A method for generating a.stego.-data set 
(SD) from a cover data set (CD) ■ especially ^ for step :b) of 
one of the preceding claims, comprising the steps of:. 
5 generating at least one message : ?('ID(;;j)) , ; : 

digitally signing said iE{^ssage : (IDQg) using 
an asymmetric cryptographic key . pair'. !(p|{,,.vh ); and a/sig- 
nature generating algorithm (DSSMR) with message^recoyery 
for generating a digital signature (OADcd) , and 
10 . . -generating said stego. data . set; (SD) of said 

cover data set (CD) by generating at visas t^bne;. digital 
watermark, wherein said -digital signature .(OADgd) is used 
for deriving a seed for generating said watermark. 1 ; 

15 19 . Method for generating. and> verifying, a- wa-- 

termark in a cover data set (CD) Srepresentihg ^a.-r^^ 
dimensional cover image, *especiallyV^f or s.tiep b^^^^^^ of 
the preceding claims, comprising^;ther;f ol^^ 
generating said watermark . * ; v:> , . , - -ji;^-:^ -t^r. 
20 A) .calculating the 'Pourier 

,J least partV'of co\rer dat^ set .j(^:D}V ^d 
components of. said i coyer image ,,>^aM 

B) modulating at least -par;t of iisa^ 
components . using^ a /temjjlat e. modu3^t ipm^pat^feeri^^^ ) v : , 
25 .. G). usii%fthe"inverse..Fou23^ 

generating- a stego data set (SD) , /■ . - : 

said method further comprising the following steps, for 
verifying said watermark in a possibly scaled ^^n^ ro- 
tated version of said stego :data ii5et^s(,SD)u;ii o.^I^-im 
30 ^) calculating, the .vFoiirier^i^trtaihs^^ . . ' 

possibly scaled and/or rotated version of ^^ saictee^te 
set (SD) for generating Fourier components of said stego 
data set, ...... -^rjji. - 

E) calculating a log-^poiar:^:orsl^g^log^>1:rans- 
35* -form of said Fourier components, of said- ^tegot 'da ta?^ 

(SD), and . oC/;:,^ .-C/i.. 
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F) calculating the cross correlation between . 
a log-polar- or log-log transform (T). of said mbd^ 
pattern (T') and. said log-polar or /log^iog vtrinsifoj^ 
said Fourier components of said stego datays'et^r:^^^^^ 
5 ating a scaling and/or rotation factor.>.: ? ' ^ . -^ ^^^^^ :|..' : 



10 



15 



20^ The method of claim 19 /wherein vs^i<J^^ 
B) further comprises the steps of \.r 

calculating a log-polar or" log-log ;t;rk^ 
of said components of said cover data: set::'f<^r^%^iferating'^^^ 
Ibg-polar^Gomponents,. ■ \j"-;'^^'^--''>'^';;^*^:-^^f;^^^ 

modulating said log polar.: :c^ 
log-polar or log-log transform (T) of .said'... i^^^^ 
pattern iT' ) ' \ W ■ ^ ■';''-'r;'^; " / ^- ;Vj:i 

>21. A method for verifying /a >^ 
possibly rotated and/or sdaled versibh^-of : Sa ::^t^^ 
dimensional stego data set .{:SD}i;r ccmipirisdn^^^ 

^ calculating a Fourier -:;t^ahS:£binn^ 

■stego. data^^,se%i|SD) /. . : < Z^'^/^-^W&f.'''^-^ -^>\^' 
• ■ ' " '"^B) caic?ul%ing a\lpg-piol:^|^^ 
trans f orm xbf i'^said Fourier ■ . triansf 'bidp^^d^ i:;s^ 
■■■^set/-- - ; . : - ' 

. , ; ■ ^'H>"^^' trG.)/vcaiculatirig,"-thfe^^ 
25 log -polar ^i>r^/:^pg-lbg^t^ 

-template^l^-'. the . log-polar . of. Ipg^logrytr^si^if^l^S^ 



20 



30 




said watermark. 



. ^ 22v: The method of ^ claim-' 
B)- comprises- the step -of calculatihgvtheT^lb^^l^j^^ 
■ foinn ^ of- .:said ' Fourier transform =pf^^;sai<%^^st^c^;.-:a 
said -step -^Or-coitprises a step- of /detieGa^iig;;^^^^ 

either' a /^uniform, scaling suf f ered iby-^^saidSl^ieiiffl^ '^■^^0.-:^.:"^'H 
or a ratio ^between block size used in ^^embe?^ 



3 5 trac tion >:b f J said : watermark . 
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. 23. . The method of claim 21 >. wherein said step 
B) comprises the step of calculating: the: 'log-log * trans- 
form of said Fourier transform . of .said- s.tego :.data" set \ and 
said step C) comprises a step of detecting vei-ther a ' 
change in aspect ratio suffered by said, stego data -s^t or 
a change of aspect ratio between blc^k sizes used in em- 
bedding and extraction of said watermark; 

24. The method of claim 2 L, wherein the pres- 
ence of said watermark is verified 'by. means -of a^' Bayesiah'^ 
approach to detect the presence of :..said* w-atemark^giv^^ a 
said key without decoding said .watermark. * . 

. 25. The method of one of the claims 21 -^^^.Z 
15 further comprising at least one of the following steps : 
i ) pre- filtering saidCqov^r >dat:a by applying 
a windowing algorithm thereto; preferably- :BiacJq6an,^ 
' ning or Welch windowing, and/or V ' r^^^r; * > . ^ ; • '/^-v^^ 

. li): calculating the' .variance or distribution 
20 of \ the Fourier, transfojnn. locally ifq^r.filtering.^^ "■^ 
.-•^d 'hpise, -and/or:-, - \ ;^ c , .>U->!i^fe"^ : ■ ^ 

iii) locating local. p^^s,::in ::said|iFou^^ 
transform and carrying out said step B) for these local 
peaks-only, pref erabiy- trans forming; tonly ;the coordinates 

25 of these local .peaki*^' and .pref erably. Cusing:^ 

log-polar transform of said , coordinates vf of acaitiul^ 
said correlation, ■ • --'y :J:'ri:3'^>^ "..^y^:.< ■' 

iv) excluding low frequency data^ frdni said 
Fourier transform before carrying out: lisaid^st^p^^^B 

30 and/or, , r. 

v) detecting a scaling aiid/or rdtatifdn ^in' 
said step C) using said scaling aiid/^6r;.rot^tiorfiif6r^^ei- 
ther a) scaling and/or or rotating said rFpiirierv t^ 

form, calculating a scaled and/or irotated-. log-^log or -log- 
35 ^ polar transform therefrom and ^eorrelating.^sdid^^rot^a^^^ 

log- log or log-polar transform witti. said template, or b) 
calculating a second template by scaling and/or . rotating 
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an original Fourier-space template and calculating a log- 
log and or log-polar transform therefrom and' using ■said 
second template for calculation a second correlation with 
said- log-log or log-polar transform "of said stego data; 
5 and/or ■ ' ' /y -•. ■.^■-'-X: 

vi) weighing low f requenc^acomponehts^^^of ^^^s^ 
log-log or log-polar transform stronger .that high fte- 
quency components while carrying ; out said ' correla^^^ 

10 • 26 . A method for generating: a- stego d^ '-^ 

(SD) from' a -cover data set (CD) esji^eciallry j^fo^is^ 
one of the claims 1-18, comprising thfe stiep of 'niodiulatr^^ V^^^ 
ing said cover- data set (CD) usihg .a given 7|)a;|f6feflrn/lv(^ 
pattern is ^calculated from a watermatk; using: tlie !^^ 
15 ing .-steps ■ ; *• ..^i-i^' -t^"''-^^ 

■A) providing said - waterinarkv' ^'"^^^ ; . - , 

• ';-B) calculating ^a .first ;^inve^rse:<F^ 
^* form of -said V watermark, • r^v-^r'^^V?^:-:-';^^ 

= c^lc'ulating an inverse -loMg-i^^ 

20 polar. vjtrans form...© f said -watermar)^,- aiid/ -.-^^^ • v/vj 

'-^ ^ D) calculat^ing said pattertrj;f rom sa:i 

log-rlog^ ;oi^'^Mg-pdlar;-transf brm./ ''-.^^'^^ '^■^^-''^:^'^-yJ?Ti^^^^ .'. 

25 the Step ^pf V:c6mbihihg the 'maghai't^^ 
first- :inver^' Courier-'- transforTh-'"^^ 
ri^r trahs^orm^ of said steJgb data^ (SD:]|!^tb ^gei^ 
quency space pattern and, preferably, calculaMn^ 
ond- inverse' Fourier transform ^of 'Saidvffr^tju^ricry^i;;^ /-v::- 

30 pattern. - •■ -r^" ■ '.-^ 

:\ . ^ • . ... ■ . • -■ ■ ■ ••^■''"'^^j'^^.K^^M^^ ■■ 

. ^- 28,- A method for verifyarig::^a:'wl^ 
possibly vrdtrated and/or scaled versioi? 6f'^a:f^p^^^ 
dimensional stego data set (SD) v -pref e^rablySai' glniryied • 
35 in.onexof the claims 25 or 26v vComprlSlng^^the^nslt^ps^ v 
• , A) calculating a first' Fourier f?fer 

said stego data set (SD) , . / ; >^ ^^^^^^^^ 
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B) calculating a log-polar or a log-log 
transform of said Fourier transform of .said stega. data: 
set, 

C) calculating a second Fourier transform- of 
said log-polar or log-log transform and searching said 
watermark in said second Fourier. . t;|ans form . 

29. A method for generating a ,watemark in 
cover data set (CD) representing a two or three dimen- 
sional data, set, especially f or step.b) of .-^ohe of the 
preceding claims, comprising the following {steps : . 

A) generating a- template ..modulation ::pat tern 
(T') using a random number generator seeded. by a; key = (K) , 

B) calculating the Fourier ; transf ormv,of -at 
least part of said cover data set (GD) for, generating, : 
Fourier components of said cover.-data -set, 

C) modulatintr. at least part of ,:said Fourier 
components using said template modu lata on -.pat tern (T'.) , 

• ^ D) using the inverse. Fourier. , trans form for. 
generating a stego-image. ^^.^ ;f:v., - : ; : • : . - 



30. Method f or .generat^in^'.a,^wat€a^ 
cover data set,, (CD) representing a cover image, especially 
for gone of the. preceding claims ,; jcharacterd^ the - 

25 step of dividing s'iid iniage Into ^a.^^pli^^ ; 
and by the following steps carried out . ipr.^.e^^ 

i) calculating the Fourier transfA^^n .of the 
block, . ..... 

ii) modulating, at least F^ar^t.;;Qf^ th^e^gnitude 
30 components of the Fourier transform of. the' block/iuaing-a 

modulation pattern, which modulation pattern defines, val- 
ues to be added/ subtracted to / f rom :said magnitude conpo- 
nents, wherein for each magnitude cpmppnentijits 
sponding phase component determines ^if said valuerris-ito 
35* be added or siibtracted,. . and- wherein .the same,^?^^^ 
pattern is used for all blocks. _ . 



31. The method of claim 30 wherein said 
blocks are adjacent. • 

32; The method of claim SOv wheriiei 
image is divided into a plurality of ^orv-erlaiPE^ifi^^ 
and wherein the step i) comprises calciilatirig th^^^^^^ 
Orthogonal transform of each block to embed a Lapped Or- 
thogonal transform based watermark. v'' ;;^v«> ^ 

33. The method of claim 30 whq^r^il^i^^^ ^"'^ 
image is. divided into a plurality of nori-^sguar^:/^^^^^ 
and wherein the step t) consists in- padding; e^^ 
with' appropriate- values (constant- or .syimetfea^||^^ 
in order, to obtain square blocks, calcuiating^^iy^ 
rier ^/transiform of each obtained square ^^block'#c^S^^ 
Fourier transform based watermark. 

. 34^; -The method of claii!i'3'Q\vwherfed^h;;fe^ 

■■■■ . ■ .■ ■'"■ .^.■j-.> "" •■ ■ 

image is divided into a plurality of non-s<5uare^^bl^Q^clcs 

and,-wlierein>fiQid, - s i.) . .comprises ';cornputing>the atbij- ' ^-^ 

trary lejjigtli- Wavetet J^ansf orm-6f / ? ; 

wavelet.., transform ^based watermark ..•^^'^ ■■'^J':|;Vv^ ■:^v'', 

■''^y ' 35. ---^The": method/of one,of.-Mi#:^ciairi®p^ 
'Wherein. .the-:^watermaxJ^''isv'cipplied to i^^l^ioi^<>m ':if 
frames, of a^video. . • r * ^ ; . 

. 36'.- A method for •generatiiig^/a:.?^s;£i^^ 
(SD) fr6m::a:cover data set (CD) esp^<:iai:3^«^ 
-one ^6f ■; the^' claims 1 - 18, by. adding a^^^/irat^r^ 
cover data set,, wherein said cover data setv^cbi^ 
video data, comprising the -steps of . "vr^/^'^^'^P^ 
• : '■:s\ ■generating' three dimensional isp&tj^l^%#or 

. ■ ■- ■ .■-v.'l■■r' 
block&.of. -said-'Video data, and. - -'■'^^v.^ -^^../AVi^l^t^^^^jH^ 

- ...,.'\,v : '^applying said 'waterinark .^td-^acfe^^l^^ 

blocks, preferably by calculating a ^ourieMtra^i^lS 

each of .said-blocks. - \' -'i^jim4^^-^^ 
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37. A method for generating- a. stego data set 
(SD) from a cover data set (CD) especially according -to 
one of the preceding claims / by adding a. watermark to 

5 said cover data set comprising the - ,s,teps: of - 

dividing said stego dat4-^;sets dnto. blocks, 
calculating a lapped orthogonal transform- 
(LOT) of each of said blocks, and 

applying said watermark to said lapped or- 
10 thogonal transforms. 

38. The ^method of claim 37 further comprising 
the step of modulating selected components of- said lapped 
orthogonal transform (LOT) as a function ;of a local image 

15 characteristics, such as the local image .variance . < 

39. Method for generating and transmitting a 
data set between two parties H anjd B,^'jespeGially of one 
of the preceding claims, comprising the :S,t 

20 . . ; ^ Ejroviding: a ;Cover data^et - (GD)^: corresponding - 

'-Xo the data set "to b^ transmit>ted;> Tirs^.. ... ^ v.. . ^ 

^generating a stego da^a^ set ;i(iSpj<>Afvsai 
cover data set (CI) at a party H by generating-; /^t -least . 
one 'digital wateiniiark ^an said coyer Idata^slet - 
25 trcuismi^l^ting a hash valuer of -^saidSstego^^data 

set (SD) to a registration party (0),cand .< - • 

permanently storing certification data (CCD) 
at said registration party (0) , said, certification data 
comprising said hash value of said/ stego data.^se^^ fSI) , a 
30 digital time stamp (TVP) and information :.desigriating said 
party H. . • j. : r-.v-l' . - 

40. The method of claim 39 fui^ther /comprising 
the steps of generating a digital signature^of .said: cer- 

35' tification data (CCD) using an asymmetric, ?:cryptographic^.^ 
key^pair (psQ, vsq) of said registration :party .(6 )i, ^ : 
transmitting said certification data: (CCD ).e and -^aid^^.digi- 
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tal signature to said party H, and verifying said digital 
signature at said party H by using a public key (vsq) of 
said key pair of said registration party. 

5 41. .A method for embedding a watermark in a 

cover data set for generating a stego data set, espe- 
cially of one of the preceding claims, comprising the. 
steps of 

calculating at least some magnitude Fourier 
10 components (MC) of said cover data set (CD), 

applying an authentication function (AF) for 
generating a value (AM) derived from said Fourier compo- 
nents (MC) , 

ciphering said value (AM) using a secret key 
15 (pch) . of an asymmetric key pair (pCh, vCh) for generating 
a ciphered message, and 

embedding said ciphered message as a payload 
in a public watermark. 

42. A method for verifying the originality of 
a possibly modified stego data set generated with the 
method of claim 41 comprising the step of reading said 
value (AM) by decoding said ciphered message using the 
public key of said key par and comparing said magnitude 
Fourier components to said stego data set. 
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FURTHER INFORMATION CONTINUED FROM PCT/ISA/ 2 1 0 



1. Claims: 1-18,41,42 ' ' ' 

Method for embedding a digital watermark in a data set or digitally 
signing a message using at least one of an asymmetric cryptographic 

key pair 

2. Claims: 19-38 ■ 
Method for generating a digital watermark in a dale set and/or for 
verifying a watermark, comprising calculating a transform 

3. Claims: 39-40 

Method for generating a digital watermark in a data set, for transmitting 
a hash value of a stego data set to a registration party and for storina 
certification data there 
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because they relate to subject matter not required to be searched by this Auttyjrityifiamely: - . 

2. ^ Claims Nos.; ^1 '-'i:' ■■^'ifL^','^-^^ ^ 

^"■^ because they relate to parts of the International Application that do not comply with the prescnbedJfequirements tosuch . 
an extent that no meaningful International Search can be carried out. specifically: , , , . ; • " 7 '.-Jy^'^ VP:0^'^ 



3. ^ Claims Nos.: ■ ' , - ' ' V:-^ ' 

— because they are dependent claims and are not drafted in accordance with the second and thifdjsentenc^s^'of ;Rule6.4ra). 
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This mternational Searching Authority found multiple inventions in this international application, as follows; 
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2. [Y] As all searchable daims cc^ld be searched without effort justifying an additional fee^ this Aumonty{did;/^^^^^ 
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3. I 1 As only some of the required additional search fees were timely paid by the applicant, this Intemationai 'Sea^^ ■ 
' — ' covers only those claims for which fees were paid, specifically claims Nos.; . ■ Vrtr^ - . 



4. rn No required additional search fees were timely paid by the applicant. Consequently, this International Search Report is ; 
— restricted to the invention first mentioned in the claims; it is covered by claims Nos.: ^ t;.;;^: l 
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